CITRA Resolution No. 26/2024 — the current Data Privacy Protection Regulation — establishes comprehensive data protection obligations for entities processing personal data in Kuwait, superseding Resolution 42/2021.

CITRA Resolution No. 42/2021 — the previous Data Privacy Protection Regulation — superseded by Resolution 26/2024.

CITRA Decision No. 34/2024 — Data Classification Policy v2.3 — prescribes data classification levels and handling requirements for Kuwait government and regulated entities; superseded by a later revision.

Law No. 20 of 2014 provides the legal framework for electronic transactions and e-signatures in Kuwait, establishing validity, evidentiary rules, and obligations for electronic documents and records.

Law No. 63 of 2015 criminalises unauthorised access to computer systems, data theft, online fraud, and related cyber offences in Kuwait, establishing penalties and enforcement provisions.