LegalApp

Federal Decree by Law Concerning the Protection of Personal Data

The last update on this law was listed on 20 Sep 2021

Date of enactment of the legislation

20 Sep 2021

Effective date

02 Jan 2021

Publication date in the official gazette

26 Sep 2021

Official Gazette No

712 (ملحق)

Legislation State

Active

Disclaimer: Every effort has been made to produce an accurate and complete English version of this website/ legislation. However, for the purpose of their interpretation and application, reference must be made to the original Arabic text. In case of conflict, the Arabic text will prevail

Article (16) Right to Restrict Processing

1. The Data Subject shall have the right to oblige the Controller to restrict and stop processing in any of the following cases:
   a. The Data Subject's objection to the accuracy of the Personal Data, in which case the processing shall be restricted for a specific period to allow the Controller to verify the data accuracy.
   b. The Data Subject's objection to the processing of his/ her Personal Data in violation of the agreed-upon purposes.
   c. The processing is carried out in violation of the provisions of this Decree by Law and the applicable legislations.
2. The Data Subject shall have the right to request the Controller to continue to keep his/ her Personal Data after the completion of the processing purposes when such data is necessary to complete procedures related to claiming or defending rights and lawsuits.
3. Notwithstanding what is stated in Paragraph (1) of this Article, the Controller may proceed with the processing of the Personal Data of the Data Subject without his/ her consent in any of the following cases:
   a. If the processing is limited to storing Personal Data.
   b. If the processing is necessary to pursue any of the procedures related to claiming or defending rights and lawsuits or related to judicial proceedings.
   c. If the processing is necessary to protect the rights of third parties.
   d. If the processing is necessary to protect the public interest.
4. In all cases, the Controller, if it lifts the restriction stipulated in this Article, shall notify the Data Subject of the same.

Translated in cooperation with