1. International Data Transfer: Required when confidential information may be transferred outside Qatar, addressing compliance with cross-border data transfer requirements

2. Subcontractors: Needed when the receiving party may need to engage third parties who will have access to confidential information

3. Audit Rights: Optional provision allowing the disclosing party to audit the receiving party's compliance with the agreement

4. Insurance Requirements: Specific insurance obligations for data protection and cyber liability

5. Force Majeure: Provisions for handling confidentiality obligations during unexpected events or circumstances

6. Anti-Bribery and Corruption: Additional compliance provisions for regulated industries or government-related entities

1. Schedule 1 - Security Measures: Detailed technical and organizational security measures required for protecting confidential information

2. Schedule 2 - Authorized Personnel: List of individuals or roles authorized to access confidential information

3. Schedule 3 - Data Processing Procedures: Specific procedures for handling, storing, and processing confidential information

4. Schedule 4 - Incident Response Plan: Procedures for handling and reporting data breaches or security incidents

5. Appendix A - Form of Confidentiality Undertaking: Template for confidentiality undertakings to be signed by authorized personnel

6. Appendix B - Data Return/Destruction Certificate: Template certificate confirming return or destruction of confidential information