The UAE’s Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) comes into force today, introducing the country’s first comprehensive onshore data protection law.
Key points
- Applies to processing of personal data in the UAE, or of UAE residents.
- Requires appropriate security measures and breach notification to the regulator.
- Free zones such as DIFC and ADGM keep their own data protection laws.
- Implementing regulations are to follow.
UK organisations with UAE customers, staff or partners should map which of the three regimes applies to them and prepare accordingly.
Source: Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (UAE Legislation)
Need help understanding what this change means for your organisation? Get in touch for a pragmatic, no-obligation conversation.
