Bahrain · Privacy & Data Protection
The country's own data-protection regime, registration duties, and its official supervisory authority.
AI-drafted, editorial review pending. The official links below are checked — confirm specifics with the authority.
The Personal Data Protection Law (Law No. 30 of 2018) has been in force since 1 August 2019 and is supervised by the Personal Data Protection Authority. It requires a lawful basis for processing, gives individuals rights of access and objection, restricts sending personal data to countries without adequate protection, and requires prior notification or authorisation for some processing, such as sensitive data. Implementing orders issued in 2022 require data breaches to be notified to the Authority within 72 hours unless they are unlikely to put individuals at risk.
- The PDPL has applied since 1 August 2019, supervised by the Personal Data Protection Authority.
- Breaches are notified to the Authority within 72 hours unless unlikely to put people at risk.
- Transfers abroad are restricted to countries with adequate protection or other permitted grounds.
- Personal Data Protection Authority
Personal Data Protection Authority: the supervisor of the Personal Data Protection Law.
Government portals
- Bahrain National Portal — Government services and guidance, including the emergency call centre.
- Sijilat — Commercial Registration — Ministry of Industry and Commerce portal for registering and renewing a commercial registration.
- Labour Market Regulatory Authority (LMRA) — Work permits, transfers between employers and Bahrainisation target rates.
- National Bureau for Revenue (NBR) — VAT, excise and the domestic minimum top-up tax.