Data Privacy Protection Regulation — Resolution 42/2021 (superseded)

Extraction note (2026-06-11): This record holds only the enacting decision of Resolution 42/2021. Its substantive annexed Regulation is published as image-only pages in the source PDF and was not machine-extractable, so those provisions are NOT included here. Resolution 42/2021 is superseded by Resolution 26/2024 (record kw-priv-000), which is fully ingested.

Arabic title: لائحة حماية خصوصية البيانات (قرار 42/2021)

Official Source

• Source index page
• English — official PDF (viewer)
  • direct: https://www.citra.gov.kw/DPPR_Resolution_42_2021.pdf

Extraction Notes

• English (DPPR_Resolution_42_2021.pdf): 2 pages, 1455 chars; 2 via digital extract, 0 via OCR
• Text extracted from the official PDFs using PyMuPDF (digital text) with Tesseract OCR fallback (Arabic+English) for scanned pages.

Extracted Source Text

Page 1

No. (42) of 2021 On Data Privacy Protection Regulation

Chairman of the Board:-

• After reviewing Law No. 37 of 2014 establishing the COMMUNICATION & INFORMATION TECHNOLOGY REGULATORY AUTHORITY, as amended by Law No. 98 of 2015.
• Decree No. 312 of 2018 forming the Board of Directors of the COMMUNICATION & INFORMATION TECHNOLOGY REGULATORY AUTHORITY.
• Cabinet Resolution No. 993 of 2015 issued on 7/13/2015 issuing the executive regulations of the above stated Law No. 37 of 2014.
• Decree No. 312 of 2018 renewing the formation of the Board of Directors of the COMMUNICATION & INFORMATION TECHNOLOGY REGULATORY AUTHORITY.
• The approval of the Board of the COMMUNICATION & INFORMATION TECHNOLOGY REGULATORY AUTHORITY at its meeting 4/2021 No. (4/2021) dated 3/28/2021,
• Based on what is required by the work interest,

It Decided

(Article I)

The provisions of the regulations attached to this decision (the Data Privacy Protection Regulation) shall apply to the public and private sectors in the State of Kuwait.

Page 2

(Article II)

The competent authorities - each within its purview- shall apply this decision, and it shall be effective from the date of its publication in the Official Gazette and the official website of the COMMUNICATION & INFORMATION TECHNOLOGY REGULATORY AUTHORITY.

(Article III)

Any text or provision shall be considered void when in contradiction or contravention with this decision.