Regulations › Rest of world › United Arab Emirates
PDPL (UAE)
Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (UAE)
WhenIn effect since 2 January 2022
Who enforces itUAE Data Office
Who it applies toProcessing of personal data in the UAE outside the free zones with their own laws, such as DIFC and ADGM.
Tell the regulatorNotify the Data Office on becoming aware of a breach prejudicing privacy, within a period the…
DPO requiredDPO required for high-risk processing, systematic assessment of sensitive data including profi…
RegistrationNo controller registration or licensing
Transfers abroadTransfer to countries with adequate protection approved by the Data Office, or via contract, e…
Request deadlineNo fixed response period
Maximum fineNo fines in force
Recent developments
Nothing reported yet. Regulatory Watch lists new rules, enforcement and court decisions as they arrive.
Regulations library
Every US state privacy law, on one map
24 states have a comprehensive privacy law in the library, alongside the EU, UK, US federal and global laws: 102 in all, each explained in plain words with its sources. Select a state to see what applies there.
- In force
- Coming into force
- Sector laws