Can my UAE employer collect and process my personal data without my consent?

In many cases, yes — an employer can lawfully process employee personal data without relying on consent, because the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) recognises lawful bases other than consent. Much HR processing is necessary to perform the employment contract (paying salary, managing leave), to comply with legal obligations (tax, social security, immigration and labour requirements overseen by authorities such as MOHRE), or to pursue the employer's legitimate interests in a balanced way. Consent is often a weak basis in the workplace anyway, because the imbalance of power can make it hard to treat as freely given. That said, the employer still must process data fairly and transparently, tell staff what data it holds and why, keep it secure, limit it to what is necessary, and respect employees' rights to access and correct their information. Processing sensitive data, or monitoring, may require additional safeguards. If you think your employer is misusing your data, you can raise it internally, then with the UAE Data Office. For a workplace privacy dispute, you can browse verified UAE legal professionals on LEXAI.