Justice, Islamic Affairs and Endowments Minister and Personal Data Protection Authority board’s acting chairman Nawaf Al Maawda announced that the ministry has started receiving applications for the appointment of Data Protection Officers in the private sector, specifically in the categories classified by the authority as high-risk in the field of personal data.
Mr Al Maawda emphasised that, following a comprehensive and careful study, the ministry has classified the private sector into three levels according to the volume of personal data being processed, the nature of the work, type of activity and the level of risk resulting from the use of personal data.
It was therefore decided to oblige high-risk sectors; namely finance, business, banking, education, health and telecommunications to appoint a Data Protection Officer whose main task will be to monitor and verify the implementation of the provisions of the Personal Data Protection Law (30) of 2018 and its implementing decisions.
The officer will also assist data controllers, co-ordinate between the authority and the data controller regarding the implementation of data processing regulations, and maintain a record of processing activities that must be reported to the authority.
He added that this initiative falls within the framework of the ministry’s responsibilities and powers under Decree (78) of 2019, emphasising the ministry’s commitment to ensuring an appropriate level of legal and technical protection for personal data processed electronically, whether in part or in full.
The ministry also aims to establish mechanisms to confront risks arising from the use of individuals’ personal data, protect their privacy, and implement a legal framework aligned with international legislation for the protection of personal data and personal freedoms.
Mr Al Maawda noted that, in co-operation with the Judicial and Legal Studies Institute (JLSI) and the Bahrain Institute of Banking and Finance (BIBF), the ministry will launch a training programme for Data Protection Officers, which will be one of the basic requirements for performing their duties in accordance with the law.
The minister noted that the authority has established a dedicated register for accredited Data Protection Officers who meet the conditions specified in Order (46) of 2022 regarding such officers.
He emphasised the importance of the officer’s role as a key figure in assisting data controllers in the private sector to apply the provisions of the law and its implementing decisions, as well as an effective monitoring tool to ensure the authority’s proper enforcement of the law.
This also contributes to creating a safe and sound environment that guarantees the proper and lawful use of individuals’ personal data.
The Personal Data Protection Authority receives applications from entities via its official email: Info@pdp.gov.bh.