How do I ask a UAE company to delete my personal data under the PDPL?

Under the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021), you have a right to request erasure of your personal data held by a controller in defined situations — for example where the data is no longer needed for the purpose it was collected, or where you withdraw the consent the processing relied on and there is no other lawful basis. Start by sending a written request to the organisation, ideally to its data protection contact or privacy team, clearly identifying yourself and the data you want deleted. The controller must consider the request and respond within the timeframe set by the law and its Executive Regulations. Erasure is not absolute: a business may lawfully retain data it needs to meet another legal or regulatory obligation, to establish or defend a legal claim, or for other grounds recognised by the law. If the controller refuses without a valid basis or fails to respond, you can lodge a complaint with the UAE Data Office, the federal supervisory authority. For a contested or high-value matter, you can browse verified UAE legal professionals on LEXAI to get tailored advice.