Can I get a copy of all the data a UAE company holds about me?

Yes. The UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) gives you a right of access, allowing you to ask a controller whether it processes your personal data and, if so, to obtain information about it. This typically includes the categories of data being processed, the purposes, the parties or categories of recipients it is shared with, the envisaged retention period or the criteria for setting it, and information about the source of the data and your other rights. You can usually also obtain a copy of the data itself. To make the request, contact the organisation's privacy or data protection contact in writing, identify yourself sufficiently so they can verify you, and state what you are seeking. The controller must respond within the period set by the law and its Executive Regulations, and there are limited grounds on which it can decline or restrict the response, for example to protect the rights of others. If the organisation refuses without justification or fails to reply, you can escalate to the UAE Data Office. For a contested access request, you can compare verified UAE legal professionals on LEXAI.