10/24/2020  Bahrain Business Laws | Law of Providing Cloud Computing Services to Foreign Parties c. ‘Cloud Computing Contract’ means an agreement entered into between a Service Provider and a Customer concerning the provision and use of a Cloud Computing Service; ‫ﻋـﺮﺑـﻲ‬ d. ‘Cloud Computing Service’ means information and communications technology services provided through Cloud Computing, which include, but are not limited to, infrastructure as a service, platform as a service and software as a service offerings made available to a Customer through the use of Cloud Computing; e. ‘Service Provider’ means any provider of Cloud Computing Service to the public through any Data Centre; f. ‘Customer’ means any Foreign Party that has entered into a Cloud Computing Contract with a Service Provider; g. ‘Customer Content’ means software (including machine images), data, text, audio, video, or images that a Customer or its end users transfer to the Service Provider for storage and/or use for Cloud Computing Services. Customer Content also includes any computational results that a Customer or its end users derive from the Cloud Computing Service through its use of such Cloud Computing Services; h. ‘Data Centre’ means any data centre designated under section 4 of this law that is physically located in the Kingdom and which provides Cloud Computing Services to Customers; i. ‘Foreign Party’ means any entity that is validly existing under the law of a Foreign Sate, including any public or private juridical person established or constituted in a Foreign State and any government or non-government entity of a Foreign State; and j. ‘Foreign State’ means any foreign state, including where applicable any of its territorial units which has its own laws, designated under section 4 of this law. Section 2 Purposes of the Law The purposes of this law is to provide a legal framework that encourages Foreign Parties use of and investment in Cloud Computing Services within Data Centres. Section 3 Jurisdiction over Customer Content 1. Subject to paragraph (4), the Customer Content shall be subject to the exclusive jurisdiction of the competent courts and competent public authorities, and the application of the laws, of the Foreign State in which the Customer is domiciled, constituted or established. 2. The jurisdiction under paragraph (1) of the competent courts and competent public authorities shall mean the power to issue valid and binding orders to the Service Provider or the relevant Customer, in accordance with the laws of the relevant Foreign State, concerning the Customer Content, including orders for providing access, disclosure, preserving or maintaining the integrity of the Customer Content. 3. Where a Service Provider receives an order from a competent court or competent public authority of a Foreign State, based on its jurisdiction over the Customer Content under this section, the Service Provider shall as soon as practicable inform the Attorney General in writing of the order and provide him with a copy of such order. 4. The competent judge and the Attorney General in the Kingdom, each in his respective capacity according to the Information Technology Crimes Law, shall if requested by a competent court or a public authority of a Foreign State, order the enforcement of any executable order, which is final and not subject to further appeal, issued by such court or public authority pursuant to its powers under this section that relates to providing access, disclosure, preserving or maintaining the integrity of Customer Content, or any matter in connection with Customer Content in respect of which the competent judge or the Attorney General has power under the Information Technology Crimes Law. Section 4 Designation of Foreign States and Data Centres 1. Data Centres and Foreign States referred to under this law shall be designated under a Regulation to be issued by the Council of Ministers and published in the official gazette. If a Service Provider has more than one Data Centre in the Kingdom, the designation shall apply to all Data Centres of that Service Provider. https://bahrainbusinesslaws.com/laws/Law-of-Providing-Cloud-Computing-Services-to-Foreign-Parties 2/3

Select target paragraph3