Businesses operating in Kuwait or processing the data of Kuwaiti residents must by 1 July 2022 comply with the provisions of the Data Protection Regulation and the recent Cloud Computing Regulatory Framework. Businesses should therefore start assessing their activities and security systems, ensure corporate policies and procedures align, and train internal staff on the core principles and obligations of the Regulation. Furthermore, cloud service providers are expected to register or obtain a license from the Regulator as required by the Cloud Computing Regulatory Framework by the end of March 2022.