These tools and metrics are designed to help AI actors develop and use trustworthy AI systems and applications that respect human rights and are fair, transparent, explainable, robust, secure and safe.
GCC AI and Data Protection checklist
The GCC AI and Data Protection checklist is an open checklist for companies in Qatar whose staff use AI tools with personal data. It covers tools such as chatbots, writing assistants, CV screening and transcription tools. Most guidance on AI and data protection is written for the EU’s General Data Protection Regulation. This checklist instead applies Qatar’s Personal Data Privacy Protection Law (Law No. 13 of 2016) for onshore companies, and the Qatar Financial Centre Data Protection Regulations 2021 for firms in the Qatar Financial Centre. It was developed by ARCUS LLC, a consultancy in Doha, and a companion file lists the official texts of nine data protection regimes in the Gulf Cooperation Council (GCC) region.
The checklist has 13 points. They cover:
- recording which AI tools are used and what data goes into them
- having a lawful basis for processing
- informing people
- handling health and children’s data
- contracts with AI providers
- cross-border transfers
- impact assessments before new uses
- human review of automated decisions
- security and 72-hour breach notification
- data minimisation and deletion
- responding to individual requests
- consent for marketing
- a written AI policy and staff training
Each point lists the practical steps and cites the legal article it rests on, with links to the official legislative or regulatory text. Users go through the checklist with someone who knows which AI tools their teams use, and treat each unticked point as a gap. The checklist is general information and does not assess an organisation’s own processing.
About the tool
You can click on the links to see the associated tools
Tool type(s):
Objective(s):
Purpose(s):
Target sector(s):
Country/Territory of origin:
Lifecycle stage(s):
Type of approach:
Maturity:
Usage rights:
Technology platforms:
Use Cases
Would you like to submit a use case for this tool?
If you have used this tool, we would love to know more about your experience.
Add use case




























