Kuwait · Reviewed September 2026

What Is CITRA Decision 2024/26 on the Data Privacy Protection Regulation?

CITRA Decision 2024/26 is the current official instrument located in the supplied research. It replaces the 2021 regulation and applies to covered service providers. The reviewed materials support mechanisms for access, correction, deletion, restriction, objection, transfer requests, and withdrawal of consent. CITRA offers an online consumer complaint route with an approximate duration of 11 working days. That duration describes the located complaint service; the supplied research did not locate a general statutory deadline for responding to every individual rights request. A dedicated Kuwait data-broker route was not located. The exact Arabic/English controlling-text boundary also remains an explicit caveat, so this profile does not resolve which language version controls every point.

Written byRahul Kandoriya·Founder, OfflistMe·Last updated September 6, 2026

Key takeaways

Kuwait CITRA Decision 2024/26 (CITRA Decision 2024/26 on the Data Privacy Protection Regulation) is the primary consumer privacy law for Kuwait, enacted in 2024 and last substantively updated in Decision 2024/26 replaces the 2021 regulation; the general rights-response deadline and exact Arabic/English controlling-text boundary were not located.
Supervisory authority: Communication and Information Technology Regulatory Authority (CITRA). Private right of action: Limited.
Statutory citation: CITRA Decision 2024/26: Data Privacy Protection Regulation.
Kuwait CITRA Decision 2024/26 may be relevant when you contact a data broker. OfflistMe can help draft a request for you to review and send; it does not decide legal applicability, provide legal advice, or guarantee a broker's response.

At a glance

Full name: CITRA Decision 2024/26 on the Data Privacy Protection Regulation
Short code: Kuwait CITRA Decision 2024/26
Jurisdiction: Kuwait
Enacted: 2024
Last major update: Decision 2024/26 replaces the 2021 regulation; the general rights-response deadline and exact Arabic/English controlling-text boundary were not located
Regulator: Communication and Information Technology Regulatory Authority (CITRA)
Private right of action: Limited
Statutory citation: CITRA Decision 2024/26: Data Privacy Protection Regulation

Scope, who Kuwait CITRA Decision 2024/26 covers

Covered service providers under CITRA Decision 2024/26; the supplied research summary did not detail the full territorial, sectoral, or exemption boundaries.

Protected data

Personal data addressed by the Data Privacy Protection Regulation; the supplied research summary did not itemize more detailed protected-data categories.

Data subject rights

Right of access

Right to correction

Right to deletion

Right to restriction of processing

Right to object

Right to make a transfer request

Right to withdraw consent

Right to use CITRA's online consumer complaint route, with an approximate service duration of 11 working days

Notable features

Decision 2024/26 replaces the 2021 regulation and is the current official instrument located for covered service providers. CITRA's online complaint service has an approximate 11-working-day duration, but no general rights-response deadline was located.

Enforcement & penalties

Regulator: Communication and Information Technology Regulatory Authority (CITRA)

Penalties: The supplied research summary did not provide a consolidated penalty schedule or amount, so no penalty figure is stated here.

Private right of action: The supplied materials describe CITRA's consumer complaint route, but do not establish a separate private damages action.

Relevance to data brokers

No Kuwait-specific data-broker, people-search, or public-record removal route was located. The general mechanisms in Decision 2024/26 should not be presented as a confirmed broker-specific opt-out process.

Generate requests in under 60 seconds

Generate removal requests for 1,034 US/global profiles, $9

OfflistMe helps draft opt-out requests using the details you choose. Review the provider route and legal basis, then send from your own inbox. The tool is not legal advice and does not guarantee a broker's response.

Generate My Opt-Out Requests

FREE

FAQ

What is Kuwait's current official data-privacy instrument in this profile?+

The supplied research identifies CITRA Decision 2024/26 as the current official instrument located; it replaces the 2021 regulation and applies to covered service providers.

What rights were located in Kuwait's CITRA materials?+

The supplied research supports access, correction, deletion, restriction, objection, transfer requests, and consent withdrawal.

Is there a Kuwait-specific data-broker opt-out route?+

No dedicated Kuwait data-broker route was located in the supplied research pass.

Official sources & citations

Other international privacy regimes

Kuwait CITRA Decision 2024/26 sits in a global ecosystem of data-protection laws. Compare with other jurisdictions that shape cross-border data flows:

Related concepts & guides

Privacy research hubBrowse every law explainer and source ledger Data removal by countryBrowse jurisdiction-specific removal guides US Privacy Laws MatrixAll US state laws compared What is GDPR?EU framework What is CCPA?California baseline What is a data broker?Full explainer Privacy glossaryTerms defined What is GPC?Browser opt-out signal What is FCRA?US consumer reporting law What is FTC Act §5?US privacy enforcement Check broker exposureSee which brokers may have your info One-time data removalPay once, no subscription needed Start for $9Prepare reviewable removal requests