United Arab Emirates: Data Protection

Rita Abou Samra and Aishwarya More examine the latest 2025 compliance reforms introduced by DIFC and ADGM, highlighting key amendments to the DIFC Data Protection Law and ADGM's new auditor registration framework. The analysis explores expanded individual rights, broader application of data protection regulations, and the practical steps businesses must take to ensure compliance with these new governance requirements.

Fraud schemes in the UAE are evolving rapidly, exploiting the country's digital infrastructure through phishing, investment scams, and identity theft. With fraud attempts rising 35% annually and costing billions in losses, understanding how to recognize warning signs and protect your legal rights has become essential for residents and businesses operating in Dubai and across the Emirates.

The United Arab Emirates has established one of the world's most comprehensive legal frameworks to address digital misconduct, with Federal Decree-Law No. 34 of 2021 serving as the cornerstone of its cybercrime regulation.

On 8 July 2025, the Dubai International Financial Centre ("DIFC") enacted a comprehensive set of legislative amendments following a public consultation paper released in February 2025.

In the digital age, where information flows freely, respecting the privacy of individuals remains paramount. The UAE has implemented legal frameworks to protect personal data and individual privacy.

Data Privacy Comparative Guide for the jurisdiction of United Arab Emirates, check out our comparative guides section to compare across multiple countries

The United Arab Emirates Federal Decree-Law No. 45/2021, otherwise and colloquially denoted as the ‘Personal Data Protection Law' (PDPL) came into effect on January 2nd 2022.

On September 7, 2023, the Saudi Authority for Data and Artificial Intelligence (SDAIA) issued the Implementing Regulations of the Personal Data Protection Law (the Implementing Regulations)...

In today's digital age, the UAE, like many other nations, deals with the challenges of rumour spread and the distribution of false information, especially online.