• Part 4: Part 4: Records and Notifications to the QFC Authority

    • Article 17 - Requirement to record operations and notify the QFC Authority

      (1) A Data Controller must establish and maintain a record of all wholly or partly automatic Personal Data Processing operations or set of such operations intended to secure a single purpose or several related purposes.
      (2) The QFC Authority may make Rules prescribing:
      (A) the information in relation to Personal Data Processing operations that must be recorded for the purposes of Article 17(1);
      (B) the circumstances in which a Data Controller must notify the QFC Authority of any operations referred to in Article 17(1); and
      (C) the content of any such notification.

    • Article 18 - Register of notifications

      The QFC Authority shall keep a register of Personal Data Processing operations notified in accordance with Article 17.