Electronic Direct Marketing in Qatar (Article 22)
If you have ever received an unsolicited promotional SMS, email, or app notification from a business in Qatar, you may have been the victim of an unlawful marketing practice. Under Article 22 of Law No. 13 of 2016, sending any electronic communication for direct marketing purposes without the prior consent of the recipient is strictly prohibited.
What Counts as a Direct Marketing Communication?
The law covers any electronic communication sent for the purpose of promoting products, services, or commercial interests, including:
- Promotional SMS messages
- Marketing emails
- App push notifications used for advertising
- Electronic newsletters sent without opt-in consent
Mandatory Requirements for Lawful Marketing
Even where consent has been obtained, every marketing communication must:
- Clearly identify the sender — the identity of the originator must be disclosed
- Clearly state that the communication is for marketing purposes
- Anonymous or disguised marketing messages are unlawful
Your Rights as a Recipient
As an expat in Qatar, you have the right to:
- Refuse consent to receive marketing communications at any point
- Withdraw consent you have previously given (Article 5)
- Object to continued marketing where it is not aligned with the purposes for which your data was originally collected
- File a complaint with the Competent Department if unlawful marketing continues
Violations of Article 22 carry penalties of up to QR 1,000,000.
Practical Steps if You Receive Unsolicited Marketing
- Use the unsubscribe or opt-out mechanism if provided
- Contact the sender in writing to demand they stop and withdraw any consent
- If they continue, file a complaint with the Competent Department under Article 26
- Keep records of the communications as evidence
Special Categories of Personal Data (Article 16)
Not all personal data is treated equally under Qatari law. Certain types of information are classified as Personal Data with Special Nature because their mishandling carries a heightened risk of harm, discrimination, or violation of dignity.
What Data Is Classified as Special Nature?
Under Article 16, the following categories are expressly protected:
- Ethnic origin
- Children's data
- Health information
- Physical or psychological condition
- Religious beliefs or creeds
- Marital relations
- Criminal offenses
The Minister of Transport and Communications has the authority to add additional categories by decision if misuse of other data types poses comparable risks.
Why This Matters for Expats
As an expat in Qatar, several of these categories are directly relevant to your daily interactions:
- Health data is collected by clinics, hospitals, and insurance providers — all must comply with heightened protections
- Religious beliefs may be referenced in HR or community contexts — employers cannot freely process this data
- Ethnic origin data cannot be used in ways that facilitate discrimination
- If you are involved in any legal proceedings, data about criminal offenses is specially protected
Penalties for Mishandling Special Data
Violations involving special-category data attract the highest penalties under the law — up to QR 5,000,000 under Article 24. This reflects the serious harm that can result from the misuse of this type of information.
Children's Data and Online Safety (Article 17)
Qatar's law gives specific and enhanced protection to children's personal data, particularly in the context of websites and online services. Under Article 17, any owner or operator of a website that addresses or targets children must:
- Post a clear notice on the website explaining:
- What children's data is collected - How that data is used - The policies followed for disclosing that data
- Take additional protective measures commensurate with the sensitivity of children's data
Practical Advice for Expat Parents
- Review privacy notices on any website or app your child uses that operates in Qatar
- Look for a children's privacy policy — its absence may indicate non-compliance
- Be cautious about apps and platforms that collect your child's name, school, location, or image
- If a platform targeted at children lacks a proper privacy notice, you can report it to the Competent Department
- Violating children's data protections carries penalties of up to QR 5,000,000
The Consent Framework: A Summary for Expats
Consent is the foundation of Qatar's data privacy law. Here is a quick reference:
| Situation | What the Law Requires | |---|---| | General data processing | Prior consent or a lawful purpose (Article 4) | | Direct marketing | Mandatory prior consent (Article 22) | | Special-category data | Enhanced protections and stricter justification | | Children's websites | Prominent notice and heightened safeguards | | Withdrawal of consent | You can withdraw at any time (Article 5) |
Key Takeaways for Expats
- Never assume your consent is implied — lawful processing requires an active, informed agreement
- Sensitive personal data about your health, religion, or ethnicity has the strongest legal protections and highest penalties for misuse
- Your children's data online is subject to specific rules — check every platform they use
- Unsolicited marketing is illegal — you have the right to demand it stops and to report violations
- Qatar's data privacy framework is enforceable — the Competent Department can investigate and issue binding decisions against violators
Understanding these provisions empowers you to navigate everyday digital and commercial life in Qatar with greater confidence and legal protection.