Compliance Overview

This overview provides a snapshot of data protection regulations across various countries in the Arab world. It covers key aspects such as data collection, storage, and cookie usage. The color-coded system allows for quick assessment of our compliance status for each country's regulations in different regulatory areas.

Prequisites

Compliant

This badge shows that our analytics are compliant with that regulation of that country.

Soon

This badge shows that our analytics are not yet compliant with that regulation of that country. But we are working on it.

Uncompliant

This badge shows that our analytics are not compliant with that regulation of that country.

Note

  • In areas where regulations are not yet established, Accylin is automatically compliant as our analytics do not collect any sensitive data.
  • Also, in some countries, sensitive data collection is prohibited from being included when extending analytics with custom data properties. Make sure to check the country's regulations before using custom data properties.

Gulf Region

BahrainBahrain

Personal Data Collection

Compliant

Explicit rules for processing personal data.

No personal data collected.

Cookie Use

Compliant

Requires explicit consent.

We do not use cookies.

Data Storage Location

Compliant

Transfers allowed with safeguards.

Consent

Compliant

Explicit consent.

No consent required. Unless if analytics are extented with identifying data, then explicit consent is required.

KuwaitKuwait

Personal Data Collection

Compliant

Limited under IT and e-commerce laws.

Cookie Use

Compliant

Not regulated.

Data Storage Location

Compliant

No requirements.

Consent

Compliant

Implied consent.

OmanOman

Personal Data Collection

Compliant

Broad rules under cyber laws.

Cookie Use

Compliant

Not regulated.

Data Storage Location

Compliant

No requirements.

Consent

Compliant

Implied consent.

QatarQatar

Personal Data Collection

Compliant

Explicit rules for sensitive data.

Cookie Use

Compliant

Requires explicit consent.

We do not use cookies.

Data Storage Location

Compliant

Localization for sensitive data.

No sensitive data collected. And no sensitive data should be included when extending analytics with custom data properties.

Consent

Compliant

Explicit consent.

No consent required. Unless if analytics are extented with identifying data, then explicit consent is required.

Saudi ArabiaSaudi Arabia

Personal Data Collection

Compliant

Comprehensive personal data rules.

Cookie Use

Compliant

Requires consent.

We do not use cookies.

Data Storage Location

Compliant

Localization required.

Data is stored locally with strict security.

Consent

Compliant

Explicit consent.

No consent required. Unless if analytics are extented with identifying data, then explicit consent is required.

UAEUAE

Personal Data Collection

Compliant

Strict collection requirements.

No personal data collected.

Cookie Use

Compliant

Requires consent.

We do not use cookies.

Data Storage Location

Soon

Localization in some zones.

Consent

Compliant

Explicit consent.

No consent required. Unless if analytics are extented with identifying data, then explicit consent is required.

YemenYemen

Personal Data Collection

Compliant

Sparse privacy protections.

No personal data collected.

Cookie Use

Compliant

Not regulated.

Data Storage Location

Compliant

No requirements.

Consent

Compliant

Implied consent.

Levant

IraqIraq

Personal Data Collection

Compliant

Limited regulation; addressed in drafts.

Cookie Use

Compliant

Not regulated.

Data Storage Location

Compliant

No requirements.

Consent

Compliant

Implied consent.

JordanJordan

Personal Data Collection

Compliant

Broad rules under cybercrime law.

Cookie Use

Compliant

Not regulated.

Data Storage Location

Compliant

No requirements.

Consent

Compliant

Implied consent.

LebanonLebanon

Personal Data Collection

Compliant

Requires data minimization and safeguards.

No personal data collected. And safeguards like anonymization and encryption are used.

Cookie Use

Compliant

Not regulated.

Data Storage Location

Compliant

No requirements.

Consent

Compliant

Consent required.

No consent required. Unless if analytics are extented with identifying data, then explicit consent is required.

PalestinePalestine

Personal Data Collection

Compliant

Limited protections in broader laws.

Cookie Use

Compliant

Not regulated.

Data Storage Location

Compliant

No requirements.

Consent

Compliant

Implied consent.

SyriaSyria

Personal Data Collection

Compliant

Sparse regulations in IT laws.

Cookie Use

Compliant

Not regulated.

Data Storage Location

Compliant

No requirements.

Consent

Compliant

Implied consent.

North Africa

AlgeriaAlgeria

Personal Data Collection

Compliant

Requires clear purpose and safeguards.

No personal data collected. And safeguards like anonymization and encryption are used.

Cookie Use

Compliant

Not explicitly regulated.

No cookies used.

Data Storage Location

Compliant

No explicit localization law.

Consent

Compliant

Consent is required.

No consent required. Unless if analytics are extented with identifying data, then explicit consent is required.

EgyptEgypt

Personal Data Collection

Compliant

Consent required; strict processing rules.

No personal data collected. And safeguards like anonymization and encryption are used.

Cookie Use

Compliant

Implied consent allowed; unclear on enforcement.

No cookies used.

Data Storage Location

Compliant

Data localization mandated for sensitive data.

No sensitive data collected. And do not include sensitive data in your analytics. Consider this when extending analytics with custom data properties.

Consent

Compliant

Explicit consent.

No consent required. Unless if analytics are extented with identifying data, then explicit consent is required.

LibyaLibya

Personal Data Collection

Compliant

Limited coverage under IT laws.

Cookie Use

Compliant

Not regulated.

Data Storage Location

Compliant

No requirements.

Consent

Compliant

Implied consent.

MoroccoMorocco

Personal Data Collection

Compliant

Requires explicit purpose and safeguards.

No personal data collected. And safeguards like anonymization and encryption are used.

Cookie Use

Compliant

Explicit consent for cookies.

We do not use cookies.

Data Storage Location

Soon

Transfers need CNDP approval.

Consent

Compliant

Explicit consent.

No consent required. Unless if analytics are extented with identifying data, then explicit consent is required.

TunisiaTunisia

Personal Data Collection

Compliant

Broad protections for data collection.

Cookie Use

Compliant

Not explicitly regulated.

Data Storage Location

Compliant

Localization not mandatory.

Consent

Compliant

Consent required.

No consent required. Unless if analytics are extented with identifying data, then explicit consent is required.

Other Countries

MauritaniaMauritania

Personal Data Collection

Compliant

Limited provisions in cyber laws.

Cookie Use

Compliant

Not regulated.

Data Storage Location

Compliant

No requirements.

Consent

Compliant

Implied consent.

SomaliaSomalia

Personal Data Collection

Compliant

Sparse regulations under criminal laws.

Cookie Use

Compliant

Not regulated.

Data Storage Location

Compliant

No requirements.

Consent

Compliant

Implied consent.

SudanSudan

Personal Data Collection

Compliant

Limited protections in IT laws.

Cookie Use

Compliant

Not regulated.

Data Storage Location

Compliant

No requirements.

Consent

Compliant

Implied consent.