Personal Data Protection Law No. 30 of 2018 — Bahrain

The Personal Data Protection Law No. 30 of 2018 (PDPL) is Bahrain’s primary data protection legislation governing the collection, processing, storage, use, and disclosure of personal data. The law establishes obligations for data controllers and processors, provides individuals with rights over their personal information, regulates sensitive personal data, introduces consent and transparency requirements, and sets standards for data security and cross-border transfers. The PDPL forms Bahrain’s comprehensive privacy framework and aligns with international data protection principles.