AI WATCH MENA
Legal Intelligence • United Arab Emirates

United Arab Emirates: Federal Decree-Law No. 45 of 2021 (PDPL)

The UAE PDPL governs data processing for residents and mandates strict consent and data minimization. It grants rights to access, erase, and correct d...

Non-Compliance Penalties

Determined by UAE Cabinet (Administrative penalties apply)

Effective Date
January 2, 2022
Regulatory Authority
UAE Data Office (plus DIFC/ADGM separate regulators)
Residency Rule
Flexible. Transfer permitted to countries with 'adequate protection'. Free zones (DIFC/ADGM) have their own GDPR-aligned rules.

Executive Summary

The UAE PDPL governs data processing for residents and mandates strict consent and data minimization. It grants rights to access, erase, and correct data. Notably, government data and free zones like DIFC and ADGM are exempt or have their own laws.