Iraq - The impact of the GDPR outside the EU

Nick O'Connell
Partner, Head of TMT - KSA
Riyadh, Saudi Arabia
+971 (0) 4 364 1641

In Iraq the GDPR has had limited impact.


There is currently no modern data protection law in Iraq, and there is accordingly no Data Protection Authority. There are Iraqi law considerations that could be material in the context of considering personal data processing activities, either in an HR context or more broadly. These have not been prepared with GDPR in mind. They range from general provisions protecting privacy or providing for remedies where someone causes damage to another. Depending on the circumstances of a data breach, it may be prudent to consider notifying law enforcement authorities and affected individuals, although there is no generally applicable legal obligation to do so.

Find an IUS Laboris lawyer

For more details or any specific matters, feel free to get in touch with the authors or search for a local lus laboris employment lawyer.

Our lawyers
The view from other places

Select topics and stay in touch with the latest developments.

Sign up