🇦🇪
United Arab Emirates
Federal Decree-Law No. 45 of 2021
Middle East🔵 Substantial
Compliance Score
86%
12 Addressed
2 Partial
0 None
Authority
Ministry of AI & Data
Overview
The UAE's Federal Data Protection Law, effective 2022, establishes a comprehensive framework for protecting personal data. The law applies to all organizations operating in the UAE and includes provisions for data subject rights and cross-border transfers.
14-Topic Coverage Analysis
Data Protection Authority
AddressedConsent Requirements
AddressedData Subject Rights
AddressedCross-Border Transfer
AddressedBreach Notification
AddressedDPO Requirements
AddressedChildren's Data
AddressedPenalties & Enforcement
AddressedSector-Specific Rules
PartialCookie/Tracking
AddressedAI & Automated Decisions
AddressedData Localisation
PartialSignificant Data Fiduciary
AddressedGovernment Data
Addressed? Frequently Asked Questions
What is the primary data protection law in United Arab Emirates?+
United Arab Emirates is governed by the Federal Decree-Law No. 45 of 2021. The law is enforced by the Ministry of AI & Data. According to our analysis, the country has a Substantial level of data protection framework.
Does United Arab Emirates require a Data Protection Officer (DPO)?+
Yes, under the Federal Decree-Law No. 45 of 2021, organizations are generally required to appoint a Data Protection Officer (DPO) or a similar privacy officer to ensure compliance.
What are the data localisation rules in United Arab Emirates?+
Partially. While Federal Decree-Law No. 45 of 2021 may not mandate general localisation, specific sectoral laws (like finance or health) might require data to be stored locally.
What are the breach notification requirements in United Arab Emirates?+
Under the Federal Decree-Law No. 45 of 2021, organizations must notify the Ministry of AI & Data and affected individuals without undue delay in the event of a personal data breach.