Yes, corporate or organisational liability is addressed under Article 14 of Kuwait's Information Technology Crimes Law (No. 63 of 2015). The law states that the legal representative of a corporate entity (such as a company director or CEO) can be held personally liable for the financial penalties prescribed under the law, provided it is proven that their negligence, failure to supervise, or failure to follow up enabled or contributed to the commission of the cybercrime by someone acting on behalf of the organisation.
Importantly, this corporate liability does not replace the individual criminal liability of the employee who actually committed the offence — both can face consequences simultaneously. The legal representative faces the monetary fines, while the offending employee may face both imprisonment and fines.
For expats working in managerial or compliance roles in Kuwait, this means that maintaining proper IT governance, access controls, and employee oversight is not just good business practice — it is a legal obligation. Companies should have clear acceptable-use policies for IT systems and ensure staff are trained on cybercrime laws. Under Article 13, courts can also order the confiscation of equipment used in a cybercrime and the closure of premises where the offence took place, which could have serious operational consequences for any business.
This is general legal information, not legal advice. For advice on your specific situation, consult a lawyer licensed in Kuwait.