What is the DPL DSAR deadline?

Under Law No. 13 of 2016 concerning Personal Data Privacy Protection (DPL), the standard response deadline is 30 days. The counting method is calendar days, starting from the day of receipt.

DPL is enforced by Compliance Affairs Department, Ministry of Transport and Communications. Maximum penalties: Up to QAR 5M and/or imprisonment up to 3 years for serious violations.

🇶🇦DPL

Qatar — DPL DSAR Deadline Calculator

Q: Can I extend a DPL deadline?

No. DPL does not provide for deadline extensions under standard circumstances.

Calculate your exact response deadline under Law No. 13 of 2016 concerning Personal Data Privacy Protection (DPL).

Configure your DSAR

Select jurisdiction, request type, and date — results update instantly.

Jurisdiction

Your deadline will appear here

Select a jurisdiction and request type to get started

DPL Overview

Full Name

Law No. 13 of 2016 concerning Personal Data Privacy Protection

Effective Since

2016-11-13

Regulatory Authority

Compliance Affairs Department, Ministry of Transport and Communications

Official Text

View law

Maximum Penalties

Up to QAR 5M and/or imprisonment up to 3 years for serious violations

Request Types & Deadlines

Request Type	Deadline	Extension
Right of Access Art. 7 — Right to access personal data held by the data controller	30 days	Not available
Right to Correction Art. 8 — Right to request correction of inaccurate personal data	30 days	Not available
Right to Object Art. 9 — Right to object to processing of personal data	30 days	Not available

Request Type

Deadline

Extension

Right of Access

Art. 7 — Right to access personal data held by the data controller

30 days

Not available

Right to Correction

Art. 8 — Right to request correction of inaccurate personal data

30 days

Not available

Right to Object

Art. 9 — Right to object to processing of personal data

30 days

Not available

Extension Rules

DPL does not provide for deadline extensions under standard circumstances.

Special Rules & Common Mistakes

•Must respond to data subject requests within a reasonable timeframe (generally interpreted as 30 calendar days)
•No specific statutory deadline defined in the law — 30-day estimate based on enforcement guidance
•Qatar Financial Centre (QFC) has separate, more detailed Data Protection Regulations
•Cross-border data transfer requires consent or adequate protection
•Law applies to processing of personal data within the State of Qatar
•Executive regulations provide additional implementation details

Compare with Other Jurisdictions

Law	Deadline	Method	Extension
🇶🇦 Qatar DPL	30 days	calendar days	No
🇪🇺 EU GDPR	1 months	calendar months	+2 months
🇬🇧 UK GDPR	1 months	calendar months	+2 months
🇺🇸 CCPA	45 days	calendar days	+45 days