PDPPL enforcement decisions tracker

Publicly reported binding decisions under Qatar's PDPPL, with links to the reports.

Last reviewed: 28 October 2026

General information only, not legal advice. For advice on your obligations, consider asking a lawyer licensed in Qatar.
WhenOrganisation typeWhat was reportedSource
Dec 2024 (reported Mar 2025)E-commerce companyBinding decision after a personal data breach.Qatar Tribune
Apr 2025Construction companyBinding Decision No. 3 of 2024 for breaches of provisions on controller obligations and processing controls (reported as Articles 8, 11, 13 and 14).The Peninsula
Feb 2026Sports-sector companyBinding Decision No. 3 of 2025 after a personal data breach, for inadequate technical, administrative and physical measures (reported as Articles 8(3), 13 and 14). The company was told to review those measures, ensure data accuracy and strengthen its systems.Qatar Tribune; The Peninsula

We list only decisions we have seen reported publicly, and link each report. We don't name companies the reports don't name. Know of one we've missed? Tell us.

Last checked 28 October 2026: we found no publicly reported binding decision newer than Binding Decision No. 3 of 2025 (reported February 2026), searching The Peninsula, Qatar Tribune, QNA and DataGuidance. NCSA's own privacy guidance is listed on its Personal Data Privacy Protection Department page.

Find out what your website reveals

Run the free passive mini-scan in under a minute, or ask for a quote for the full report.

Run free mini-scanRequest a quote

Need help with an issue?

Quick contact Quick fixes Email support

Send the domain and finding reference. Please do not email passwords, customer records or exposed secrets. We reply within one business day; this is not a 24-hour incident-response hotline.