Regulations › Rest of world › United Arab Emirates
DIFC DPL
Data Protection Law, DIFC Law No. 5 of 2020
WhenIn effect since 1 July 2020
Who enforces itCommissioner of Data Protection, DIFC
Who it applies toControllers and processors in the Dubai International Financial Centre, and processing of personal data there.
Tell the regulatorNotify the Commissioner as soon as practicable in the circumstances
DPO requiredDPO required for DIFC Bodies and for controllers or processors performing high-risk processing…
RegistrationControllers and processors must register by filing a notification of processing with the Commi…
Transfers abroadTransfer if destination has adequate protection or with appropriate safeguards, or listed dero…
Request deadlineRespond within one month, extendable by two months for complex or numerous requests
Maximum fineAdministrative fines up to USD 100,000 per standard contravention under Schedule 2
Recent developments
Nothing reported yet. Regulatory Watch lists new rules, enforcement and court decisions as they arrive.
Regulations library
Every US state privacy law, on one map
24 states have a comprehensive privacy law in the library, alongside the EU, UK, US federal and global laws: 102 in all, each explained in plain words with its sources. Select a state to see what applies there.
- In force
- Coming into force
- Sector laws