Who enforces data protection in Kuwait?

Kuwait has no national data protection authority. CITRA, the Communications and Information Technology Regulatory Authority, enforces its Data Protection Regulation No. 26 of 2024 against the licensed service providers it covers. For every other business, enforcement runs through prosecutors and the criminal courts, under the Electronic Transactions Law and the Cybercrime Law.

That is the practical difference from the rest of the Gulf: there is no early, administrative stage in which a regulator asks a business to fix things before a case is opened.