2 weeks Ago By Qatar Tribune
Qatar tribune Tribune News Network Doha The National Data Privacy Office (NDPO) of the National Cyber Security Agency issued a binding decision No. 3 of 2024 against a local construction company for violating the provisions of Articles No. 8, 11, 13, 14 of the Personal Data Privacy Protection Law related to the controller’s obligations and controls of processing personal data.
The decision included the obligation of the company to strengthen, develop, and monitor its administrative and technical procedures and take the necessary precautions to ensure the protection of the privacy of personal data, within 60 days from the date of issuance of the decision. NDPO has been notified of a penetration incident of one of the companies operating in the field of construction, which led to the leak of personal data held by the company (which is considered the controller of personal data), and after conducting a detailed investigation with the company concerned, NDPO found that the company had not taken sufficient technical and administrative precautions to protect the technical systems, and therefore personal data was hacked and leaked, which is a violation of the main provisions of the personal data privacy protection law. Copy 15/04/2025 10.
