Client Alert: Significant Global Data Breach Incident – December 2024
GLA has recently been engaged by a number of global and regional companies (the “Affected Data Controllers”) who have been impacted by a significant data breach. The data breach incident, which the Affected Data Controllers were informed of between 17- 18 December 2024 (the “Incident”), directly targeted a number of data processors, namely a global technology and services company and one of its subcontractors (the “Affected Data Processors”). It is unclear when the actual Incident occurred, or the scope of the data and data subjects affected by the incident.
GLA is continuing to support its Affected Data Controller clients and has filed notifications required under the data protection laws of several MENA jurisdictions, including:
- Saudi Arabia
- UAE
- Kuwait
- Qatar
- Bahrain
As most GCC countries require Affected Data Controllers to notify the relevant authorities within a few days from becoming aware of a data breach incident, any companies who have been impacted by the Incident should take action without delay.
GLA is well-placed to provide comprehensive regional legal support to Affected Data Controllers. For more information, please contact Asad Ahmad, Head of Data Privacy at asad.ahmad@glaco.com