CITRA issues new data privacy regulations
The Communications and Information Technology Regulatory Authority (CITRA) has issued a new regulation on data privacy, aimed at protecting the rights and freedoms of individuals whose personal data is collected by telecommunications and information technology service providers.
The new regulation, No. 26/2024, replaces the previous regulation, No. 42/2021, and sets out the conditions, principles, and guidelines for the management and processing of data by service providers.
It also includes provisions and obligations to support this regulatory approach. CITRA stressed the importance of service providers complying with the new regulation in order to protect data and the fundamental rights and freedoms of individuals related to the privacy of their personal data.
This will encourage CITRA to issue a set of regulatory tools, conditions, and guidance related to the practices of service providers and all associated provisions.
Key features of the new data privacy
It requires service providers to obtain consent from individuals before collecting or processing their personal data. The purposes for which personal data can be collected and processed are specified.
Moreover, it requires service providers to take appropriate security measures to protect personal data from unauthorized access, use, or disclosure. Individuals are given the right to access, correct, or delete their personal data.
Service providers must notify CITRA of any data breaches that could result in a high risk to the rights and freedoms of individuals.
CITRA also issued a new regulation on caller ID, No. 28/2024. This regulation requires licensed network operators to provide caller ID for calls from businesses and organizations only. The service must be activated without the need for users to activate any settings on their devices and without any additional fees. This regulation came into effect on January 1, 2024.
CITRA’s Vision
CITRA aspires to develop a robust industry that relies on providing the best communication and IT services to government agencies, businesses, and individuals within Kuwait. This will support the work of government, commercial, and industrial activities and contribute to attracting investors interested in this field and strengthening the foundations of competition in order to achieve the State of Kuwait’s vision of becoming a financial and commercial center.
