HomeSearch

Lenses
Business lenslens
Certifying body lenslens
End user / data subject lenslens
Front-line staff lenslens
Government lenslens
Human rights / privacy advocate lenslens
Policymaker (Government lens)lens
Regulator / enforcer (Government lens)lens
Africa
Egyptplanned
Ghanaplanned
Kenyaplanned
Moroccoplanned
Nigeriaplanned
Rwandaplanned
South Africaplanned
Asia-Pacific
Australiaplanned
Chinadrafting
Hong Kongplanned
Indiaplanned
Indonesiaplanned
Japanplanned
Malaysiaplanned
New Zealandplanned
Philippinesplanned
Singaporeplanned
South Koreaplanned
Thailandplanned
Vietnamplanned
Europe
European Uniondrafting
Switzerlandplanned
Türkiyeplanned
United Kingdomplanned
Latin America
Argentinaplanned
Brazilplanned
Chileplanned
Colombiaplanned
Peruplanned
Uruguayplanned
Middle East
Bahrainplanned
Israelplanned
Qatarplanned
Saudi Arabiaplanned
United Arab Emiratesplanned
North America
Canadaplanned
Mexicoplanned
United States (federal)drafting
United States
Californiadrafting
Coloradoplanned
Connecticutplanned
Delawareplanned
Floridaplanned
Indianaplanned
Iowaplanned
Kentuckyplanned
Marylandplanned
Minnesotaplanned
Montanaplanned
Nebraskaplanned
New Hampshireplanned
New Jerseyplanned
Ohioplanned
Oregonplanned
Rhode Islandplanned
Tennesseeplanned
Texasplanned
Utahplanned
Virginiaplanned
Menu

United Arab Emirates

Coverage plannedAlso: UAE, DIFC, ADGM, Dubai, Abu Dhabi

VERIFIED 2026-09-17 · REVIEW BY 2027-03-16

Three overlapping regimes: the federal law, and separate data protection laws in the DIFC and ADGM financial free zones.

Instruments

No instrument recorded for United Arab Emirates yet.

Regulator

No regulator with a sourced address is recorded for United Arab Emirates yet.

Exercisable rights

Access, correction, erasure, portability and objection. Which law applies depends on whether you are in a financial free zone

Through each lens

End user / data subject

What can I actually do about this today, and what does it cost me.

No end user / data subject analysis for United Arab Emirates yet.

Business

What does this obligate us to build, and by when.

No business analysis for United Arab Emirates yet.

Government

Government is one lens carrying two sub-lenses, each with judicial reviewability analysis.

No government analysis for United Arab Emirates yet.

Policymaker

What did the drafters intend, and what did the text achieve.

No policymaker analysis for United Arab Emirates yet.

Regulator / enforcer

What can this authority make stick on appeal.

No regulator / enforcer analysis for United Arab Emirates yet.

Certifying body

What is the scope of what we are attesting to.

No certifying body analysis for United Arab Emirates yet.

Front-line staff

What do I do when this lands on my desk.

No front-line staff analysis for United Arab Emirates yet.

Human rights / privacy advocate

Who does this regime fail, and can that be shown.

No human rights / privacy advocate analysis for United Arab Emirates yet.

Sources

  1. Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data, Arts. 13-18 · retrieved 2026-09-17 · https://uaelegislation.gov.ae/en/legislations/1972
  2. DIFC Data Protection Law, DIFC Law No. 5 of 2020, Active; commenced 1 June 2020 · retrieved 2026-09-17 · https://www.difc.com/business/laws-and-regulations/legal-database/difc-laws/data-protection-law-difc-law-no-5-2020