Qatar Strengthens Cybercrime Law: Implications for Businesses

Qatar’s 2025 cybercrime amendment imposes strict penalties for unauthorized use of personal images and videos, signaling stronger digital privacy enforcement. Businesses must enhance compliance, update policies, and adopt robust consent practices to navigate the evolving regulatory landscape.

Qatar has introduced new penalties for privacy violations under its cybercrime legislation, signalling a stronger regulatory stance on digital rights. Law No. 11 of 2025, which amends the 2014 Cybercrime Law, criminalizes the publication or circulation of images and videos of individuals without their consent, carrying penalties of up to one year of imprisonment, along with substantial fines.

In this article, we examine the scope of Qatar’s new legal provisions, assess their potential impact on businesses operating in the country, and place the development within the wider context of evolving privacy and data protection regimes across the Gulf. By doing so, we highlight both the compliance challenges and the opportunities emerging for companies navigating the region’s increasingly regulated digital landscape.

Also read: How to Navigate Intellectual Property Protection in Qatar

Qatar’s new privacy penalties

Law No. 11 introduces a new provision, Article 8 (bis), into Qatar’s 2014 Cybercrime Law, directly targeting the unauthorized use of personal images and videos online. The amendment criminalizes the publication or circulation of such content without the consent of the individuals concerned, whether in public or private settings, if done through an information network or other forms of information technology.

Under the law, offenders may face imprisonment for up to one year, a fine of up to QAR 100,000 (approximately US$27,500), or a combination of both penalties. Importantly, the amendment does not only address malicious intent but also covers instances where images or recordings are shared without proper authorization, highlighting the government’s intention to set strict boundaries around digital conduct.

The legislation took effect immediately upon its publication in the Official Gazette on August 4, 2025, meaning businesses and individuals are already subject to its provisions. With this development, Qatar is signalling that privacy infringements in the digital sphere are no longer treated as minor offences but as serious breaches carrying both financial and custodial consequences.

Business impact: key considerations

Qatar’s recent amendments to its cybercrime legislation introduce significant implications for various sectors, necessitating immediate attention and adaptation from businesses operating within the country.

Media and content creation

Journalists, broadcasters, influencers, and marketing firms now face heightened liabilities when utilizing images or videos of individuals. The new laws criminalize the unauthorized publication or circulation of such content, even if obtained in public spaces.

This development has raised concerns among media professionals. The Committee to Protect Journalists (CPJ) has highlighted that the vague and broad language of the amendment could be used to prosecute journalists, photojournalists, and bloggers for their work, potentially stifling press freedom.

Corporate compliance and HR

Companies operating in Qatar must urgently review and update internal policies related to employee monitoring, workplace surveillance, and the use of CCTV footage. The new legislation extends to the unauthorized use of personal images or videos, which could encompass employee-related content captured in workplace settings.

Additionally, employee social media policies become increasingly critical. Businesses should ensure that employees are aware of the legal ramifications of sharing personal content online and establish clear guidelines to mitigate potential violations.

Marketing and advertising

The amendment imposes stringent consent requirements for using consumer images in promotional materials. Brands conducting influencer campaigns or user-generated content promotions must implement robust consent mechanisms to avoid legal repercussions. The potential for fines or imprisonment underscores the necessity of obtaining explicit permission before utilizing personal content in marketing efforts.

Technology and platforms

Social media platforms, app developers, and cloud services operating in Qatar may face increased pressure to adopt stricter reporting, takedown, and consent mechanisms. Compliance with Qatar’s data protection and cybersecurity obligations is paramount. The National Cyber Governance and Assurance Affairs (NCGAA) oversees the enforcement of the Personal Data Protection Law (PDPL), and organizations found in violation can face fines ranging from QR 1,000,000 to QR 5,000,000.

Businesses should proactively implement measures to safeguard personal data, including obtaining necessary permissions, ensuring data accuracy, and establishing internal systems for breach notifications and data subject rights management.

Key takeaways

Qatar’s new cybercrime amendment marks a significant step toward strengthening digital privacy protections, with potential fines, imprisonment, or both for unauthorized use of personal images and videos. Businesses across media, marketing, HR, and technology sectors must reassess compliance frameworks, update internal policies, and implement robust consent mechanisms. While the law introduces clear compliance challenges, it also creates opportunities for companies to build trust, adopt privacy-focused practices, and align operations with the region’s evolving digital regulatory landscape.

• Previous Article 外国投资者在迪拜如何投资、购买与管理房产
• Next Article