GCC LexAIDocumentsGlossary
UAE (DIFC)2020

DIFC Data Protection Law

DIFC DPL

DIFC Law No. 5 of 2020, the data protection law for the Dubai International Financial Centre. GDPR-aligned. Applies to DIFC entities instead of UAE federal PDPL. Administered by the DIFC Commissioner of Data Protection.

Ask GCC LexAI about DIFC DPLUAE (DIFC) data protection

Key Requirements

Applies to

All entities established within the Dubai International Financial Centre (DIFC), and entities outside DIFC processing personal data of DIFC residents.

Issued by:DIFCUAE overview

Related Documents (4)

regulation2023

DIFC Data Protection Regulations — Consolidated Version (incl. Reg 10 AI, 2023)

The DIFC Data Protection Regulations outline the requirements for processing personal data within the Dubai International Financial Centre. This consolidated version includes updates related to AI and covers obligations related to data processing records, notifications, supervision, data transfers, breach reporting, and potential fines for non-compliance. It aims to protect personal data and ensure responsible data handling practices.

data protectiondata breachDIFCprivacy
guidance2020

DIFC Commissioner of Data Protection — Overview of Personal Data Regime

This document provides an overview of the data protection law and regulations within the Dubai International Financial Centre (DIFC). It outlines the interplay between DIFC, Federal, and Emirate laws, the authority of the DIFC Commissioner of Data Protection, and the principles for processing personal data. It also covers the rights of data subjects and the legal duties of controllers and processors.

data protectionprivacyDIFCdata governance
guidance2020

DIFC Comprehensive Guide to Data Protection Law and Regulations

This document is a comprehensive guide issued by the DIFC Commissioner of Data Protection regarding Data Protection Law, DIFC Law No. 5 of 2020, and its associated regulations. It aims to provide accessible information about the legislation, covering definitions of personal and special category data, obligations of controllers and processors, data export, data subject rights, and breach procedures.

data protectionpersonal datadata breachesdata export
law2020

DIFC Data Protection Law No. 5 of 2020 (Consolidated Version)

The DIFC Data Protection Law No. 5 of 2020 (Consolidated Version) outlines the requirements for processing personal data within the Dubai International Financial Centre (DIFC). It establishes principles for lawful processing, special categories of data, consent, legitimate interests, and accountability. The law aims to protect individuals' privacy rights and regulate data processing activities within the DIFC.

data protectionprivacyDPOdata processing
AI-generated summaries only. This is not legal advice. Arabic originals are legally binding where applicable. · ← Glossary