The Communication and Informal Technology Authority (CITRA) issued resolution No. 244 of 2023 amending the previous No. 42 of 2021 – Data Protection Resolution (DPR).

The implementation of data protection and privacy laws and regulations is a fairly new development in Kuwait. Until a few years ago, there were very few provisions that focussed on protecting the personal data of individuals as well as company data. This changed with the establishment of CITRA (Kuwait Communications and the Information Technology Regulatory Authority). CITRA has issued regulations to protect data, whether owned by persons or legal entities, whether stored in devices, servers or in the cloud. The amended DPR issued by CITRA establishes data protective measures, security protocols, including encryption of sensitive information, and guidelines on how to properly respond to the hacking of data.

We assist various clients, such as, retailers, online sellers and retailers, employers, major international financial institutions, pharmaceutical companies, service providers, both local and international, in navigating through these new regulations; meeting privacy challenges; addressing data breach and data protection questions; reviewing data privacy policies, data protection contracts, cloud service agreements, data service providers contracts and other similar agreements, to ensure DPR compliance.

Connect with us to see how we can assist you further.