Overview
The UAE Personal Data Protection Law (Federal Decree Law No. 45 of 2021) applies to the processing of personal data within and outside the UAE via electronic systems. Key provisions include requiring consent for data processing, outlining obligations for data controllers to secure and maintain confidentiality, and granting individuals the right to correct, restrict, or stop the processing of their data. The law establishes controls for cross-border data sharing and applies exceptions to processing for public interest or legal procedures. It came into force on January 2, 2022, and was developed in collaboration with private sector technology companies. The UAE Data Office is tasked with overseeing its implementation, issuing guidance, and handling complaints.