Effective technology governance establishes accountability over systems, information and technology-related decisions, while data protection controls help organisations manage how personal and business information is collected, processed, stored and shared. In Qatar, these responsibilities are supported by Law No. 13 of 2016 on Protecting Personal Data Privacy, which requires personal data to be processed lawfully and securely and places obligations on data controllers and processors. HLB AG advises organisations on developing governance and data protection frameworks that support responsible technology use and compliance with applicable Qatar requirements.

Our IT Governance & Data Protection Advisory services include:

• IT governance framework development and reviews
• IT policies, standards and procedures
• Technology risk and governance assessments
• Data protection framework reviews
• Personal data processing and compliance assessments
• Data privacy policies and procedures
• Data classification and information-handling frameworks
• Data access and retention controls
• Third-party and data-processing risk reviews
• Data protection gap assessments and remediation planning

HLB AG helps management establish clearer accountability over technology and information assets while identifying gaps in data protection practices. Our advisory work can also be aligned with Qatar’s National Information Assurance Standard (NIA Standard), which provides baseline information-security controls covering areas such as governance, access control, change management, data protection, business continuity and security monitoring..