Data Privacy & User Rights Protection
Telecom and media companies collect large volumes of subscriber data, including personal, location, usage, and behavioral information. Regulators are increasingly focused on privacy, consent, data usage transparency, and user rights. While Iraq does not yet maintain a unified data protection law, sector-specific obligations are enforced through CMC directives and cybersecurity standards.
Data Protection Requirements
- Lawful collection and processing of data
- User consent for data usage
- Secure data storage and transmission
- Disclosure controls for third-party access
- Breach notification mechanisms (where applicable)
CMC Compliance
- Protect subscriber data from unauthorized access
- Maintain confidentiality and access controls
- Respond to regulatory inquiries regarding data handling
- Support lawful interception under due process
How Etihad Can Assist
Etihad provides legal and regulatory advisory services to banks, financial institutions, and businesses, supporting compliance with applicable laws, regulations, and regulatory guidance issued by any competent authorities.