Global Privacy Laws – What Are UAE Federal Data Protection Laws?

February 16, 2022Dated:  | |

Data privacy is one of the most concerning issues in today’s world of technology where every product or service is available online. Your data is stored on every device you use and therefore, Data Protection Laws were needed.

The GDPR (General Data Protection Regulation) enforcement has created a global seismic shift in how countries, organizations, and individuals viewed data privacy and saw a rapid international move towards more rigorous controls and protections. The high growth rate of technology will need global data privacy laws to evolve & ensure efficient data protection.

5 Principles of International Privacy Laws 

NoticeChoice & ConsentAccess & ParticipationIntegrity & SecurityEnforcement
It is a compulsion to advise users, visitors and readers about protecting personal information.Visitors must have the option of choosing & providing their consent for use, storage, management and collection of personal information.Ensuring the proper security protocol for usage and access authority to the data.Keeping the data secure and eradicating unauthorized access.Any regulation compliance must enforce service, site, hosting, and platform.

UAE’s First Federal Data Protection Law

The country issues its first federal data protection law to consider the privacy laws that will safeguard the users interests and data privacy. Let’s see what is its applicability, date from which is enforceable, and steps to implement regulations of the law. 

Applicability of the Law

The data protection law in UAE will be applicable to 

  • the controllers and the processors in UAE, and
  • Controllers and processors outside UAE processing data of the individuals in UAE.

Exception to the Applicability of the Law

The UAE Federal Data Protection Law will not be applicable to 

  • Government authorities and their data
  • Health, banking and credit data that has specific legislation
  • Organizations in free zones that have specific data protection laws such as Dubai International Financial Center (DIFC).

The Data Protection Law has recently come into force from 2nd January, 2022 whereas certain detailed regulations will be provided in the Executive Regulation which will be ready by March 2022.

Getting Ready to be Data Protection Law Compliant Organization

The first and the foremost step would be to review the current personal data processing activities that will give you an idea where you will need to work and create a comprehensive framework to establish an effective compliance to the new legislative requirements.

Reviewing the scope and establishing relevant data protection measures will help you revisit the procedures you followed so fat and what will be required from now on. However, those organizations that do not have any existing data processing activities will have to create a framework that will set the basis for the compliance of the laws.

Such organizations will have to build a robust data protection compliance program to ensure they adhere to each and every requirement of the UAE Federal Data Protection Law.

Closing Thoughts

While it is important to know the regulatory compliances, its practical implications could be different than what is expected. Therefore, it is advisable to consult a legal professional who can guide you on the complex laws and regulations. 

Our seasoned professionals can help you comply with the Data Protection Regulations.  Contact us if you have any queries to understand any provision of the regulation. 

    Know Your Corporate Tax