Skip to main content

    AI by country · Middle East

    AI in Qatar: the rules, the readiness and where to start

    Last checked: 29 October 2026

    What should a company in Qatar know before starting with AI?

    Qatar has no dedicated AI law as of 29 October 2026. Law No. 13 of 2016 on Protecting Personal Data Privacy applies to AI that uses personal data, supervised by the National Cyber Security Agency, while firms in the Qatar Financial Centre follow the QFC's own data protection regulations. Banks and other firms licensed by Qatar Central Bank must also follow its AI guideline, which requires approval before launching new AI systems.

    At a glance

    Qatar at a glance

    Key facts about Qatar
    Data protection lawLaw No. 13 of 2016 on Protecting Personal Data Privacy (PDPPL); QFC Data Protection Regulations 2021 inside the Qatar Financial Centre
    RegulatorNational Cyber Security Agency (NCSA); QFC Data Protection Office for QFC firms
    AI policyNational Artificial Intelligence Strategy (2019) and Qatar Central Bank AI Guideline (2024). No dedicated AI law as of 29 October 2026
    Time zoneAST, UTC+3 (India is 2.5 hours ahead)
    CurrencyQAR (Qatari riyal)
    Business languageArabic, with English widely used in business

    Why now

    Why Qatar is worth watching

    Each point links to the document it comes from.

    • Qatar launched its National Artificial Intelligence Strategy in October 2019, built on six pillars that include data access, employment and AI ethics.[6]

    • The Council of Ministers set up an Artificial Intelligence Committee in 2021 to oversee the strategy and coordinate AI work across government.[7]

    • Qatar Central Bank published an AI guideline that regulates the use of AI by the entities it licenses.[4]

    • The NCSA publishes guidelines for regulated entities, a breach notification form and a permit process for processing special categories of data.[2]

    • The QFC's data protection rules include a right not to be subject to solely automated decisions, which matters for AI scoring and screening.[3]

    The rules

    The rules that matter for AI

    What each law or policy means when you build or buy an AI system.

    Law No. 13 of 2016 on Protecting Personal Data Privacy (PDPPL)

    In force2016A controller must review privacy measures before starting new processing (Article 11), which applies to any new AI use of personal data. Data about health, children, ethnic origin, religion and similar categories needs a permit before processing (Article 16). The controller must tell the person and the regulator about a breach that may cause serious damage (Article 14). Fines reach QAR 1 million or QAR 5 million depending on the article breached (Articles 23 and 24).[1]

    QFC Data Protection Regulations 2021

    In force2021These apply inside the Qatar Financial Centre. People have a right not to be subject to solely automated decisions with legal or significant effects, with exceptions for contracts, laws and explicit written consent (Article 22). Breaches go to the QFC Data Protection Office within 72 hours where feasible (Article 31).[3]

    Qatar Central Bank Artificial Intelligence Guideline

    In force2024It covers entities licensed by QCB. A law-firm summary says firms need QCB approval before launching a new AI system, and before signing purchase or outsourcing deals for high-risk systems. It also describes duties for human oversight, an AI register, and telling customers when they deal with AI.[4]

    Where AI fits first

    Where AI fits first

    Banking and finance

    Document checks, fraud alerts and Arabic and English customer service.

    The QCB AI Guideline applies to QCB-licensed entities, including prior approval for new AI systems as summarised by law firms.[5]

    Health care

    Drafting clinical notes and triage support, with clinicians deciding.

    Health data is special-category data under Article 16 of the PDPPL and needs a permit from the regulator before processing.[1]

    Education and services for children

    Tutoring support in Arabic and English, reviewed by teachers.

    Article 17 sets extra duties for websites aimed at children, including notice and parental consent.[1]

    Financial and professional firms in the QFC

    Contract review and client onboarding checks with a person approving results.

    The QFC Data Protection Regulations apply, including Article 22 on automated decisions.[3]

    Your first steps

    Your first steps

    1. Confirm whether you fall under the PDPPL, the QFC regulations, or both for different activities.
    2. Review privacy measures before any new AI processing, as Article 11 of the PDPPL requires, and keep a written record.
    3. Check whether your AI uses health, children's or other special data, and apply to the NCSA for a permit if so.
    4. Set up a breach process that can notify the NCSA using its form, and the QFC Data Protection Office within 72 hours if you are a QFC firm.
    5. If you are licensed by QCB, read its AI Guideline and plan for approval before launch.
    6. Keep a register of AI systems, their providers and risks, which QCB-licensed firms must do and others will find useful.
    7. Give people a way to have automated decisions reviewed by a person.

    AI services for Qatar

    AI consulting and development for teams in Qatar

    We work remotely with companies in Qatar, in your time zone, and keep your data under the rules described above.

    AI agents and automation

    Agents that finish multi-step work across your tools, with people approving what matters.
    Learn more

    Document Q&A (RAG)

    Answers from your own documents, with the source shown for every answer.
    Learn more

    AI governance and data protection

    Policies, review steps and audit trails that fit your local data law.
    Learn more

    Software and cloud engineering

    Web apps, integrations and cloud platforms built around your AI use case.
    Learn more

    How we work with you

    How we work with you

    We work remotely with clients worldwide, in the client's time zone. Qatar is on UTC+3 and India on UTC+5:30, a 2.5 hour gap. Taking a 9:00 to 17:00 day in Qatar and 9:30 to 18:30 in India, the overlap is about 7 hours, from 09:00 to 16:00 Qatar time. The Qatari working week is Sunday to Thursday, so Monday to Thursday are shared working days.

    Questions

    Common questions about AI in Qatar

    Does Qatar have an AI law?

    Not a dedicated one as of 29 October 2026. AI that uses personal data falls under Law No. 13 of 2016, and QCB-licensed firms must follow the QCB AI Guideline.

    Who enforces the data protection law?

    The National Cyber Security Agency says it performs the role of competent authority under the law. Inside the Qatar Financial Centre, the QFC Data Protection Office applies the QFC's own regulations.

    Can we use an AI service hosted outside Qatar?

    Article 15 of the PDPPL bars a controller from limiting cross-border data flow unless the processing breaches the law or may cause serious damage. You still need the law's safeguards and any permits for special data.

    What are the penalties?

    Up to QAR 1 million for breaching core duties such as breach reporting and transfers, and up to QAR 5 million for breaching security, special data and children's data rules. Legal persons can face up to QAR 1 million under Article 25.

    Complimentary tools

    Try these first

    Three complimentary tools from our AI Toolkit that suit a team starting out.

    AI readiness score

    Answer a few questions and see where your team stands, in about five minutes.
    Open the tool

    AI use case triage

    Test an idea against data, risk and effort before you spend on it.
    Open the tool

    AI project cost estimator

    Get a rough build and run cost range for a first AI project.
    Open the tool

    Read next

    Sources

    Sources

    Facts checked on 29 October 2026. Numbers in square brackets above match this list.
    1. [1] National Cyber Security Agency, Compliance and Data Protection Department (English translation), 2016-11-03. Law No. 13 of 2016 on Protecting Personal Data Privacy(database.cyberpolicyportal.org)
      Full title and what we used it for

      Law No. 13 of 2016 on Protecting Personal Data Privacy. Unofficial English translation hosted by the Cyber Policy Portal; it states the official text is in Official Gazette No. 15 of 2016 on almeezan.qa, which we could not open. Used for Articles 11, 13 to 17 and 23 to 25. The issue date is as reported by press and secondary sources.

    2. [2] National Cyber Security Agency (NCSA), 2026-10-29. Personal Data and Privacy Protection Law, and Personal Data Breach Noti…(ncsa.gov.qa)
      Full title and what we used it for

      Personal Data and Privacy Protection Law, and Personal Data Breach Notification. Primary, accessed on this date. Used for the NCSA's role as competent authority, the guidelines hub, the breach notification form and the special nature permission request. The breach page did not state a deadline, so we give none.

    3. [3] Qatar Financial Centre, Data Protection Office, 2023-12-06. Data Protection Regulations and Rules 2021 Guidance (v3)(qfc.qa)
      Full title and what we used it for

      Data Protection Regulations and Rules 2021 Guidance (v3). Primary guidance that quotes the regulation text. Used for Articles 22 and 31. It says Version 3 of the Regulations came into force on 6 December 2023.

    4. [4] Qatar Central Bank, 2024-09-04. Artificial Intelligence Guideline (Regulating the use of AI by QCB lice…(qcb.gov.qa)
      Full title and what we used it for

      Artificial Intelligence Guideline (Regulating the use of AI by QCB licensed entities). Primary. The guideline PDF is linked from this page; it is a scanned document we could not read as text, so we rely on s5 for its requirements. Issue date from QNA and law-firm reports.

    5. [5] Pinsent Masons (Out-Law), 2024-09-26. Qatar Central Bank guidelines on ethical AI in the financial sector(pinsentmasons.com)
      Full title and what we used it for

      Qatar Central Bank guidelines on ethical AI in the financial sector. Law-firm summary, used for interpretation only: prior approval, high-risk systems, human oversight, AI register and customer disclosure.

    6. [6] Gulf Times, 2019-10-29. Qatar launches strategy to tap AI for future(gulf-times.com)
      Full title and what we used it for

      Qatar launches strategy to tap AI for future. Press report. Used for the launch of the National AI Strategy at Qitcom 2019 and its six pillars. The ministry's own strategy page returned an error when we checked.

    7. [7] Qatar Tribune (citing QNA), 2025-12-31. Qatar advances AI adoption under Digital Agenda 2030(qatar-tribune.com)
      Full title and what we used it for

      Qatar advances AI adoption under Digital Agenda 2030. Press report. Used for the Artificial Intelligence Committee set up by the Council of Ministers in 2021.

    This is general information, not legal advice. The official text of Qatar's data law is in Arabic, and we worked from an English translation and some law-firm summaries. Check with a qualified Qatari lawyer before you act. Facts checked on 29 October 2026.

    Other country guides

    Starting with AI in Qatar?

    Talk to an engineer. The first call is free, and we start with a readiness assessment before any budget is committed.

    Talk to our team Get your AI score