Federal and free zone data protection laws in the UAE, including DIFC Data Protection Law, ADGM Data Protection Regulations, and the UAE Federal Personal Data Protection Law (PDPL).
Ask GCC LexAI about Data Protection →The UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) is the UAE's first federal data protection legislation, governing the processing of personal data in the UAE with requirements for consent, data subject rights, and cross-border transfer controls.
DIFC has its own Data Protection Law (DIFC Law No. 5 of 2020) which applies within the Dubai International Financial Centre. It is closely aligned with GDPR and may differ in scope and requirements from the UAE federal PDPL.
Key obligations include appointing a Data Protection Officer (where required), obtaining valid consent, providing data subject rights (access, correction, deletion), implementing security measures, and registering with relevant authorities.