قانون حماية البيانات الشخصية

كذلك بـ

The PDPL is the UAE's federal data protection law, issued in 2021 as Federal Decree-Law No. 45 of 2021. Conceptually similar to Europe's GDPR, it requires a lawful basis — typically consent or defined exceptions — for processing personal data, grants individuals rights of access, correction, deletion and objection, restricts cross-border data transfers, and mandates breach notification. It applies to businesses processing data of people in the UAE, while the DIFC and ADGM apply their own, older data protection regimes inside their zones. A federal Data Office is designated as regulator, with executive regulations completing the framework. Companies meet the PDPL in privacy policies, HR data handling, marketing consent and vendor contracts. Lawyers advise on compliance programmes, data processing agreements, transfer mechanics and the interplay between federal, DIFC and ADGM rules.