Your employer in Qatar is considered a Controller under Law No. 13 of 2016, meaning they have significant legal obligations when handling your personal data. Under Article 9, before processing your data your employer must inform you of key details, including who is handling the data, the purposes for which it is being processed, and who it may be shared with. This notice should be given clearly and in advance.
Article 8 further requires that your employer processes your data honestly and legitimately, keeps it accurate and up to date, and does not retain it longer than necessary. They must also consider privacy protections when designing internal HR systems, payroll platforms, or other tools that handle employee data.
Your employer must also take security measures under Article 13 to protect your data from unauthorised access or leaks. If your employment data includes sensitive categories — such as your health records for insurance, your nationality, or information about a criminal background check — Article 16 applies and even stricter safeguards are required. As an expat, it is worth checking your employment contract and your company's privacy policy to ensure these obligations are being met, and raising concerns with HR or the Ministry of Transport and Communications if you believe your data rights are being violated.
This is general legal information, not legal advice. For advice on your specific situation, consult a lawyer licensed in Qatar.