Samtaro Security & Legal legal resources

Plain-English summaries of the data-protection rules that most often apply to SMEs in Qatar, the GCC, Cyprus and the EU. Each one links to its primary sources.

Last reviewed: 18 October 2026

Not legal advice. This summary is general information prepared by Samtaro Security & Legal, a non-law-firm resource of Samtaro Security & Legal. It may be incomplete or out of date, and it is no substitute for advice from a lawyer licensed in the relevant jurisdiction. Last reviewed: 18 October 2026.

Qatar PDPPL (Law No. 13 of 2016)

Consent and lawful purpose, privacy notices, security precautions, breach notification, special-nature data, children's websites, direct marketing and enforcement.

QFC Data Protection Regulations 2021

The separate regime for firms licensed in the Qatar Financial Centre: principles, security, 72-hour breach reporting, cookies and consent, and the QFC Data Protection Office's powers.

Cyprus Law 125(I)/2018

How Cyprus implements the GDPR: the Commissioner for Personal Data Protection, fines, and the criminal offences in Article 33.

EU GDPR essentials

Lawful bases, transparency, processors, records, security, the 72-hour breach notification, DPIAs and territorial scope for non-EU businesses.

Website compliance checklists

Practical checklists for privacy notices, cookies and consent, forms and marketing, vendors, and breach readiness.

Find out what your website reveals

Run the free passive mini-scan in under a minute, or ask for a quote for the full report.

Need help with an issue?

Quick contact Quick fixes Email support

Send the domain and finding reference. Please do not email passwords, customer records or exposed secrets. We reply within one business day; this is not a 24-hour incident-response hotline.