| QFC Reg No 6 – Data Protection Regulations |
| Enactment Notice |
Part 1:
Application, Commencement and Interpretation |
Article 1 - Citation |
| Article 2 - Application |
| Article 3 - Commencement |
| Article 4 - Language |
| Article 5 - Interpretation |
Part 2:
General Provisions for the Processing of Personal Data |
Article 6 - General requirements |
| Article 7 - Requirements for legitimate Processing |
| Article 8 - Processing of Sensitive Personal Data |
| Article 9 - Transfers to jurisdictions with adequate levels of protection |
| Article 10 - Transfers to jurisdictions without adequate level of protection |
| Article 11 - Providing information where data obtained from the Data Subject |
| Article 12 - Providing information where data not obtained from the Data Subject |
| Article 13 - Confidentiality |
| Article 14 - Security of Processing |
Part 3:
Rights of Data Subjects |
| Article 15 - Right to access, rectification, erasure and blocking of Personal Data |
| Article 16 - Right to object to Processing |
Part 4:
Records and Notifications to the QFC Authority |
| Article 17 - Requirement to record operations and notify the QFC Authority |
| Article 18 - Register of notifications |
Part 5:
The QFC Authority |
| Article 19 - General Powers of the QFC Authority |
| Article 20 - Production of information |
| Article 21 - Power to make Rules |
Part 6:
Remedies, Liability and Sanctions |
| Article 22 - Directions |
| Article 23 - Claims |
Part 7:
General Exemptions |
| Article 24 - General Exemptions |
Part 8:
Interpretation and Definitions |
| Article 25 - Interpretation |
| Article 26 - Definitions |
