Samtaro Security legal resources

Plain-English summaries of the data-protection rules that most often apply to SMEs in Qatar, the GCC, Cyprus and the EU. Each one links to its primary sources.

Last reviewed: 2026-10-18

Not legal advice. This summary is general information prepared by Samtaro Security, a non-law-firm resource of Samtaro Security. It may be incomplete or out of date, and it is no substitute for advice from a lawyer licensed in the relevant jurisdiction. Last reviewed: 18 October 2026.

Qatar PDPPL (Law No. 13 of 2016)

Consent and lawful purpose, privacy notices, security precautions, breach notification, special-nature data, children's websites, direct marketing and enforcement.

QFC Data Protection Regulations 2021

The separate regime for firms licensed in the Qatar Financial Centre: principles, security, 72-hour breach reporting, cookies and consent, and the QFC Data Protection Office's powers.

Cyprus Law 125(I)/2018

How Cyprus implements the GDPR: the Commissioner for Personal Data Protection, fines, and the criminal offences in Article 33.

EU GDPR essentials

Lawful bases, transparency, processors, records, security, the 72-hour breach notification, DPIAs and territorial scope for non-EU businesses.

Website compliance checklists

Practical checklists for privacy notices, cookies and consent, forms and marketing, vendors, and breach readiness.

Find out what your website reveals

Run the free passive mini-scan in under a minute, or ask for a quote for the full report.