We bring a combined 20 years of data protection compliance experience

We’re not new to this – from the UAE PDPL, KSA PDPL and all GCC privacy laws, to the EU GDPR and laws around the world – we can take an international approach

Recognition We’ve Earned

We’re really great at understanding what your needs are and coming up with a practical set of solutions. We work with associate specialists in information security, records management, data management and transparency.

THE VISIONARIES

Meet Our Leadership

IAPP CIPP/E CIPM FIP

Bilal Ghafoor

Managing Director

Bilal has 15 years’ experience in data protection and has led privacy programs globally, including some of the largest tech companies in KSA.

IAPP CIPP/E CIPM FIP

Laura Palmariello

Senior Associate

Laura has diverse experience in many industries, from energy to education and is our resident AI governance expert. She is known for practical advice.

SECTORS WE SERVE

Customized GCC program to match industry needs

Commerce

Digital

Education

Energy

Government

Health

Justice

Manufacture

Non Profit

Protecting your data across the globe

We have 20 years’ experience in data protection and has led privacy programs globally, including some of the largest tech companies in KSA.

Book a Call

Saudi Arabia

The Personal Data Protection Law (issued pursuant to Royal Decree No. M/19 of 9/2/1443 H, as amended by Royal Decree No. M/148 dated 5/9/1444H) (“PDPL”)

Oman

Royal Decree No. 6 of 2022 promulgating the law on the protection of personal data dated 9 February 2022

Bahrain

Law No. 30 of 2018 with respect to Personal Data Protection (“PDPL”)

Kuwait

Kuwait Law No. 20 of 2014, on Electronic Transactions (the “E-Commerce Law”) and Kuwait Law No. 63 of 2015, on Combating Cyber Crimes the (“Cybercrime Law”)

DIFC and ADGM

DIFC Law No. 5 of 2020 on Data Protection Law (“DPL”)  ADGM Data Protection Regulations 2021

United Arab Emirates

Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data Protection (“PDPL”)

UK & European Union

UK & European GDPR

Qatar

Law No. (13) of 2016 Concerning Personal Data Protection (“the Data Protection Law”)

Saudi Arabia

The Personal Data Protection Law (issued pursuant to Royal Decree No. M/19 of 9/2/1443 H, as amended by Royal Decree No. M/148 dated 5/9/1444H) (“PDPL”)

Oman

Royal Decree No. 6 of 2022 promulgating the law on the protection of personal data dated 9 February 2022

Bahrain

Law No. 30 of 2018 with respect to Personal Data Protection (“PDPL”)

Kuwait

Kuwait Law No. 20 of 2014, on Electronic Transactions (the “E-Commerce Law”) and Kuwait Law No. 63 of 2015, on Combating Cyber Crimes the (“Cybercrime Law”)

DIFC and ADGM

DIFC Law No. 5 of 2020 on Data Protection Law (“DPL”)  ADGM Data Protection Regulations 2021

United Arab Emirates

Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data Protection (“PDPL”)

UK & European Union

UK & European GDPR

Qatar

Law No. (13) of 2016 Concerning Personal Data Protection (“the Data Protection Law”)

Saudi Arabia

The Personal Data Protection Law (issued pursuant to Royal Decree No. M/19 of 9/2/1443 H, as amended by Royal Decree No. M/148 dated 5/9/1444H) (“PDPL”)

Oman

Royal Decree No. 6 of 2022 promulgating the law on the protection of personal data dated 9 February 2022

Bahrain

Law No. 30 of 2018 with respect to Personal Data Protection (“PDPL”)

Kuwait

Kuwait Law No. 20 of 2014, on Electronic Transactions (the “E-Commerce Law”) and Kuwait Law No. 63 of 2015, on Combating Cyber Crimes the (“Cybercrime Law”)

DIFC and ADGM

DIFC Law No. 5 of 2020 on Data Protection Law (“DPL”)  ADGM Data Protection Regulations 2021

United Arab Emirates

Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data Protection (“PDPL”)

UK & European Union

UK & European GDPR

Qatar

Law No. (13) of 2016 Concerning Personal Data Protection (“the Data Protection Law”)

Saudi Arabia

The Personal Data Protection Law (issued pursuant to Royal Decree No. M/19 of 9/2/1443 H, as amended by Royal Decree No. M/148 dated 5/9/1444H) (“PDPL”)

Oman

Royal Decree No. 6 of 2022 promulgating the law on the protection of personal data dated 9 February 2022

Bahrain

Law No. 30 of 2018 with respect to Personal Data Protection (“PDPL”)

Kuwait

Kuwait Law No. 20 of 2014, on Electronic Transactions (the “E-Commerce Law”) and Kuwait Law No. 63 of 2015, on Combating Cyber Crimes the (“Cybercrime Law”)

DIFC and ADGM

DIFC Law No. 5 of 2020 on Data Protection Law (“DPL”)  ADGM Data Protection Regulations 2021

United Arab Emirates

Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data Protection (“PDPL”)

UK & European Union

UK & European GDPR

Qatar

Law No. (13) of 2016 Concerning Personal Data Protection (“the Data Protection Law”)

Saudi Arabia

The Personal Data Protection Law (issued pursuant to Royal Decree No. M/19 of 9/2/1443 H, as amended by Royal Decree No. M/148 dated 5/9/1444H) (“PDPL”)

Oman

Royal Decree No. 6 of 2022 promulgating the law on the protection of personal data dated 9 February 2022

Bahrain

Law No. 30 of 2018 with respect to Personal Data Protection (“PDPL”)

Kuwait

Kuwait Law No. 20 of 2014, on Electronic Transactions (the “E-Commerce Law”) and Kuwait Law No. 63 of 2015, on Combating Cyber Crimes the (“Cybercrime Law”)

DIFC and ADGM

DIFC Law No. 5 of 2020 on Data Protection Law (“DPL”)  ADGM Data Protection Regulations 2021

United Arab Emirates

Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data Protection (“PDPL”)

UK & European Union

UK & European GDPR

Qatar

Law No. (13) of 2016 Concerning Personal Data Protection (“the Data Protection Law”)

Saudi Arabia

The Personal Data Protection Law (issued pursuant to Royal Decree No. M/19 of 9/2/1443 H, as amended by Royal Decree No. M/148 dated 5/9/1444H) (“PDPL”)

Oman

Royal Decree No. 6 of 2022 promulgating the law on the protection of personal data dated 9 February 2022

Bahrain

Law No. 30 of 2018 with respect to Personal Data Protection (“PDPL”)

Kuwait

Kuwait Law No. 20 of 2014, on Electronic Transactions (the “E-Commerce Law”) and Kuwait Law No. 63 of 2015, on Combating Cyber Crimes the (“Cybercrime Law”)

DIFC and ADGM

DIFC Law No. 5 of 2020 on Data Protection Law (“DPL”)  ADGM Data Protection Regulations 2021

United Arab Emirates

Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data Protection (“PDPL”)

UK & European Union

UK & European GDPR

Qatar

Law No. (13) of 2016 Concerning Personal Data Protection (“the Data Protection Law”)

Qatar

Law No. (13) of 2016 Concerning Personal Data Protection (“the Data Protection Law”)

UK & European Union

UK & European GDPR

United Arab Emirates

Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data Protection (“PDPL”)

DIFC and ADGM

DIFC Law No. 5 of 2020 on Data Protection Law (“DPL”)  ADGM Data Protection Regulations 2021

Kuwait

Kuwait Law No. 20 of 2014, on Electronic Transactions (the “E-Commerce Law”) and Kuwait Law No. 63 of 2015, on Combating Cyber Crimes the (“Cybercrime Law”)

Bahrain

Law No. 30 of 2018 with respect to Personal Data Protection (“PDPL”)

Oman

Royal Decree No. 6 of 2022 promulgating the law on the protection of personal data dated 9 February 2022

Saudi Arabia

The Personal Data Protection Law (issued pursuant to Royal Decree No. M/19 of 9/2/1443 H, as amended by Royal Decree No. M/148 dated 5/9/1444H) (“PDPL”)

Qatar

Law No. (13) of 2016 Concerning Personal Data Protection (“the Data Protection Law”)

UK & European Union

UK & European GDPR

United Arab Emirates

Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data Protection (“PDPL”)

DIFC and ADGM

DIFC Law No. 5 of 2020 on Data Protection Law (“DPL”)  ADGM Data Protection Regulations 2021

Kuwait

Kuwait Law No. 20 of 2014, on Electronic Transactions (the “E-Commerce Law”) and Kuwait Law No. 63 of 2015, on Combating Cyber Crimes the (“Cybercrime Law”)

Bahrain

Law No. 30 of 2018 with respect to Personal Data Protection (“PDPL”)

Oman

Royal Decree No. 6 of 2022 promulgating the law on the protection of personal data dated 9 February 2022

Saudi Arabia

The Personal Data Protection Law (issued pursuant to Royal Decree No. M/19 of 9/2/1443 H, as amended by Royal Decree No. M/148 dated 5/9/1444H) (“PDPL”)

Qatar

Law No. (13) of 2016 Concerning Personal Data Protection (“the Data Protection Law”)

UK & European Union

UK & European GDPR

United Arab Emirates

Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data Protection (“PDPL”)

DIFC and ADGM

DIFC Law No. 5 of 2020 on Data Protection Law (“DPL”)  ADGM Data Protection Regulations 2021

Kuwait

Kuwait Law No. 20 of 2014, on Electronic Transactions (the “E-Commerce Law”) and Kuwait Law No. 63 of 2015, on Combating Cyber Crimes the (“Cybercrime Law”)

Bahrain

Law No. 30 of 2018 with respect to Personal Data Protection (“PDPL”)

Oman

Royal Decree No. 6 of 2022 promulgating the law on the protection of personal data dated 9 February 2022

Saudi Arabia

The Personal Data Protection Law (issued pursuant to Royal Decree No. M/19 of 9/2/1443 H, as amended by Royal Decree No. M/148 dated 5/9/1444H) (“PDPL”)

Qatar

Law No. (13) of 2016 Concerning Personal Data Protection (“the Data Protection Law”)

UK & European Union

UK & European GDPR

United Arab Emirates

Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data Protection (“PDPL”)

DIFC and ADGM

DIFC Law No. 5 of 2020 on Data Protection Law (“DPL”)  ADGM Data Protection Regulations 2021

Kuwait

Kuwait Law No. 20 of 2014, on Electronic Transactions (the “E-Commerce Law”) and Kuwait Law No. 63 of 2015, on Combating Cyber Crimes the (“Cybercrime Law”)

Bahrain

Law No. 30 of 2018 with respect to Personal Data Protection (“PDPL”)

Oman

Royal Decree No. 6 of 2022 promulgating the law on the protection of personal data dated 9 February 2022

Saudi Arabia

The Personal Data Protection Law (issued pursuant to Royal Decree No. M/19 of 9/2/1443 H, as amended by Royal Decree No. M/148 dated 5/9/1444H) (“PDPL”)

Qatar

Law No. (13) of 2016 Concerning Personal Data Protection (“the Data Protection Law”)

UK & European Union

UK & European GDPR

United Arab Emirates

Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data Protection (“PDPL”)

DIFC and ADGM

DIFC Law No. 5 of 2020 on Data Protection Law (“DPL”)  ADGM Data Protection Regulations 2021

Kuwait

Kuwait Law No. 20 of 2014, on Electronic Transactions (the “E-Commerce Law”) and Kuwait Law No. 63 of 2015, on Combating Cyber Crimes the (“Cybercrime Law”)

Bahrain

Law No. 30 of 2018 with respect to Personal Data Protection (“PDPL”)

Oman

Royal Decree No. 6 of 2022 promulgating the law on the protection of personal data dated 9 February 2022

Saudi Arabia

The Personal Data Protection Law (issued pursuant to Royal Decree No. M/19 of 9/2/1443 H, as amended by Royal Decree No. M/148 dated 5/9/1444H) (“PDPL”)

Qatar

Law No. (13) of 2016 Concerning Personal Data Protection (“the Data Protection Law”)

UK & European Union

UK & European GDPR

United Arab Emirates

Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data Protection (“PDPL”)

DIFC and ADGM

DIFC Law No. 5 of 2020 on Data Protection Law (“DPL”)  ADGM Data Protection Regulations 2021

Kuwait

Kuwait Law No. 20 of 2014, on Electronic Transactions (the “E-Commerce Law”) and Kuwait Law No. 63 of 2015, on Combating Cyber Crimes the (“Cybercrime Law”)

Bahrain

Law No. 30 of 2018 with respect to Personal Data Protection (“PDPL”)

Oman

Royal Decree No. 6 of 2022 promulgating the law on the protection of personal data dated 9 February 2022

Saudi Arabia

The Personal Data Protection Law (issued pursuant to Royal Decree No. M/19 of 9/2/1443 H, as amended by Royal Decree No. M/148 dated 5/9/1444H) (“PDPL”)

Saudi Arabia

The Personal Data Protection Law (issued pursuant to Royal Decree No. M/19 of 9/2/1443 H, as amended by Royal Decree No. M/148 dated 5/9/1444H) (“PDPL”)

Oman

Royal Decree No. 6 of 2022 promulgating the law on the protection of personal data dated 9 February 2022

Bahrain

Law No. 30 of 2018 with respect to Personal Data Protection (“PDPL”)

Kuwait

Kuwait Law No. 20 of 2014, on Electronic Transactions (the “E-Commerce Law”) and Kuwait Law No. 63 of 2015, on Combating Cyber Crimes the (“Cybercrime Law”)

DIFC and ADGM

DIFC Law No. 5 of 2020 on Data Protection Law (“DPL”)  ADGM Data Protection Regulations 2021

United Arab Emirates

Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data Protection (“PDPL”)

UK & European Union

UK & European GDPR

Qatar

Law No. (13) of 2016 Concerning Personal Data Protection (“the Data Protection Law”)