Our core team has a combined 20 years of experience
Our origins were in UK and European data protection laws – before the GDPR, we worked on compliance with the UK’s 1998 Data Protection Act and the 1995 EU Data Protection Directive. In the last three years, our focus has turned to projects in the GCC region, with 60% of our work in KSA, 20% in the UAE and several projects in Oman, Qatar, Bahrain and Kuwait. We also deal in data transfers to the USA, Australia, Far East, South Asia, Africa and South America, so can help you with an international operation.
Bilal Ghafoor
Managing Director
Bilal has 15 years of data protection experience and has led global privacy programs for clients, including for some of the largest tech companies in KSA.
Certifications
View Profile on LinkedIn
Laura Palmariello
Senior Consultant
Laura has diverse experience in many industries, from energy to education and is our resident AI governance expert. She is known for practical advice.
Certifications
View Profile on LinkedIn
Our Approach
Why?
Compliance drivers and risk appetite
DPO
Training and involving your DPO in the program
Data Discovery
Building Records of Processing Activities
Product Delivery
Policies, guidance, PIAs, breach workshops, etc
Roadmap
Enable the DPO to ensure continuous compliance
Customized GCC program to match industry needs
AI
Commerce
Digital
Education
Energy
Government
Health
Justice
Industry
Non Profit
Subscribe to the smartest feed in your industry
Introductory course · KSA PDPL
We have the highest-rated introductory course to the KSA PDPL on Udemy. It is normally $19.99 but contact us for a voucher that will get you access for free.
With a voucher from our team. Hosted on Udemy, lifetime access.
Access Udemy Course
Protecting your data across the globe
We have 20 years' experience in data protection and have led privacy programs globally, including some of the largest tech companies in KSA.
Contact Us
Saudi Arabia
The Personal Data Protection Law (issued pursuant to Royal Decree No. M/19 of 9/2/1443 H, as amended by Royal Decree No. M/148 dated 5/9/1444H) (“PDPL”)
Oman
Royal Decree No. 6 of 2022 promulgating the law on the protection of personal data dated 9 February 2022
Bahrain
Law No. 30 of 2018 with respect to Personal Data Protection (“PDPL”)
Kuwait
Kuwait Law No. 20 of 2014, on Electronic Transactions (the “E-Commerce Law”) and Kuwait Law No. 63 of 2015, on Combating Cyber Crimes the (“Cybercrime Law”)
DIFC and ADGM
DIFC Law No. 5 of 2020 on Data Protection Law (“DPL”) ADGM Data Protection Regulations 2021
United Arab Emirates
Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data Protection (“PDPL”)
UK & European Union
UK & European GDPR
Qatar
Law No. (13) of 2016 Concerning Personal Data Protection (“the Data Protection Law”)
