Bahrain PDPL
In force Bahrain · In force Aug 1, 2019 · no upcoming deadlines
Deadlines
Summaries for reference, not legal advice. Check the official text.
What it does
Bahrain's general data protection law. It sets lawful bases for processing, stricter rules for sensitive data, individual rights, transfer limits and registration duties, and creates the Personal Data Protection Authority. It carries both administrative and criminal penalties.
- Who it applies to
- Individuals and entities that process personal data in Bahrain, and those outside Bahrain that process data using means in Bahrain.
- Penalties
- Administrative fines up to BHD 20,000 and daily fines up to BHD 1,000 (BHD 2,000 for repeats). Criminal penalties of up to one year in prison and fines of BHD 1,000 to 20,000 for offences such as unlawful sensitive data processing or unlawful transfers (Art. 58).
- Enforced by
- Personal Data Protection Authority (Art. 27)
- Official name
- Law No. 30 of 2018 on the Protection of Personal Data
- Citation
- Law No. (30) of 2018
- Topics
- privacy
Verified 2026-09-25
Research notes
Issue date 12 July 2018 is on the LLOC text. The Gazette publication date is not shown on that page; 2019-08-01 assumes publication in July 2018, so the deadline is marked tentative.
Related
Questions about Bahrain PDPL
- What are the Bahrain PDPL compliance deadlines?
- Aug 1, 2019: PDPL takes effect (tentative).
- When does Bahrain PDPL take effect?
- Bahrain PDPL took effect on Aug 1, 2019.
- Who does Bahrain PDPL apply to?
- Individuals and entities that process personal data in Bahrain, and those outside Bahrain that process data using means in Bahrain.
- What are the penalties under Bahrain PDPL?
- Administrative fines up to BHD 20,000 and daily fines up to BHD 1,000 (BHD 2,000 for repeats). Criminal penalties of up to one year in prison and fines of BHD 1,000 to 20,000 for offences such as unlawful sensitive data processing or unlawful transfers (Art. 58).