Regulations › Rest of world › United Arab Emirates

PDPL (UAE)

Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (UAE)

In force privacy

WhenIn effect since 2 January 2022

Who enforces itUAE Data Office

Who it applies toProcessing of personal data in the UAE outside the free zones with their own laws, such as DIFC and ADGM.

Tell the regulatorNotify the Data Office on becoming aware of a breach prejudicing privacy, within a period the… DPO requiredDPO required for high-risk processing, systematic assessment of sensitive data including profi… RegistrationNo controller registration or licensing Transfers abroadTransfer to countries with adequate protection approved by the Data Office, or via contract, e… Request deadlineNo fixed response period Maximum fineNo fines in force

The UAE's federal data protection law. It has been in force since January 2022, but its Executive Regulations have not been issued, so there is no set breach deadline or penalty schedule yet.

86% coveredif you already meet GDPR. 3 requirements to work on.See the gap → 4 of 21requirements scored most demanding, each cited to the law.See all 21 → 31 sectionsindexed by topic, each linked to the official text.Read section by section →

The Association's practitioner brief for this law is on the way; the priority laws come first.

Read the official text

Recent developments

Nothing reported yet. Regulatory Watch lists new rules, enforcement and court decisions as they arrive.

Sources

Text of the law UAE Legislation · Official text or regulator

Dates and status checked against these sources on 18 October 2026. This page explains the law for practitioners; it is not legal advice.

Data protection authority UAE Data Office

The Data Office has not published contact details yet.

Checked 18 Oct 2026. Report a change

DIFC · Data protection authority Commissioner of Data Protection, DIFC

Address: DIFC Authority, Level 14, The Gate, Dubai✓
Email: commissioner@dp.difc.ae ✓
Phone: +971 4 362 2222 ✓
Website: difc.com/business/registrars-and-commissioners/commissioner-of-data-protection✓
Register: Registration portal✓
Breaches: Report a breach✓

Covers entities in the Dubai International Financial Centre.

Checked 18 Oct 2026. ✓ confirmed on the authority's own site. Report a change

ADGM · Data protection authority Office of Data Protection, ADGM

Address: 9th Floor, Al Khatem Tower, ADGM Square, Al Maryah Island, Abu Dhabi✓
Email: data.protection@adgm.com ✓
Phone: +971 2 333 8888 ✓
Website: adgm.com/operating-in-adgm/office-of-data-protection✓
Register: Registration portal✓
Breaches: Report a breach✓

Covers entities in Abu Dhabi Global Market.

Checked 18 Oct 2026. ✓ confirmed on the authority's own site. Report a change

Local help in United Arab Emirates

Law firms, training centers and other providers in United Arab Emirates can apply to be listed here. We check each one before it shows.

List your organization

102 laws in plain words. Free. Associate Membership is free and open to anyone in this work or moving into it. Join free as Associate

Browse the library

US states 40 Rest of world 37 European Union 12 US federal 12 United Kingdom 1

Regulations library

Every US state privacy law, on one map

24 states have a comprehensive privacy law in the library, alongside the EU, UK, US federal and global laws: 102 in all, each explained in plain words with its sources. Select a state to see what applies there.

Explore the map Follow Regulatory Watch

In force
Coming into force
Sector laws

AK ME VT NH WA ID MT ND MN IL WI MI NY RI MA OR NV WY SD IA IN OH PA NJ CT CA UT CO NE MO KY WV VA MD DE AZ NM KS AR TN NC SC DC OK LA MS AL GA HI TX FL