Catalogue of Tools & Metrics for Trustworthy AI

These tools and metrics are designed to help AI actors develop and use trustworthy AI systems and applications that respect human rights and are fair, transparent, explainable, robust, secure and safe.

GCC AI and Data Protection checklist



The GCC AI and Data Protection checklist is an open checklist for companies in Qatar whose staff use AI tools with personal data. It covers tools such as chatbots, writing assistants, CV screening and transcription tools. Most guidance on AI and data protection is written for the EU’s General Data Protection Regulation. This checklist instead applies Qatar’s Personal Data Privacy Protection Law (Law No. 13 of 2016) for onshore companies, and the Qatar Financial Centre Data Protection Regulations 2021 for firms in the Qatar Financial Centre. It was developed by ARCUS LLC, a consultancy in Doha, and a companion file lists the official texts of nine data protection regimes in the Gulf Cooperation Council (GCC) region.

The checklist has 13 points. They cover:

  • recording which AI tools are used and what data goes into them
  • having a lawful basis for processing
  • informing people
  • handling health and children’s data
  • contracts with AI providers
  • cross-border transfers
  • impact assessments before new uses
  • human review of automated decisions
  • security and 72-hour breach notification
  • data minimisation and deletion
  • responding to individual requests
  • consent for marketing
  • a written AI policy and staff training

Each point lists the practical steps and cites the legal article it rests on, with links to the official legislative or regulatory text. Users go through the checklist with someone who knows which AI tools their teams use, and treat each unticked point as a gap. The checklist is general information and does not assess an organisation’s own processing. 

Use Cases

There is no use cases for this tool yet.

Would you like to submit a use case for this tool?

If you have used this tool, we would love to know more about your experience.

Add use case
Partnership on AI

Disclaimer: The tools and metrics featured herein are solely those of the originating authors and are not vetted or endorsed by the OECD or its member countries. The Organisation cannot be held responsible for possible issues resulting from the posting of links to third parties' tools and metrics on this catalogue. More on the methodology can be found at https://oecd.ai/catalogue/faq.