Ask a Lawyer

The UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) distinguishes ordinary personal data from special categories that carry heightened protection because misuse can cause greater harm. These sensitive categories generally include data revealing a person's racial or ethnic origin, religious or philosophical beliefs, political opinions, criminal record, health and genetic data, biometric data used to identify a person, and data concerning sex life. The law also gives particular attention to the personal data of children. Processing these categories typically requires stronger justification and safeguards than processing routine information such as a name or email address, and businesses are expected to apply appropriate technical and organisational security measures. If your organisation handles health, biometric or other sensitive data, you should map where it sits, limit access, document your lawful basis, and confirm the exact requirements and any conditions in the law's Executive Regulations and with the UAE Data Office. Mishandling sensitive data exposes a business to enforcement and complaints. For a compliance review tailored to your sector, you can browse verified UAE legal professionals on LEXAI.

Under the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021), appointing a Data Protection Officer (DPO) is not required of every organisation — it is triggered by the nature and scale of the processing. The law generally requires a controller or processor to appoint a DPO where its processing would create a high risk to the confidentiality and privacy of personal data, for example processing involving large volumes of sensitive data, systematic and extensive evaluation of individuals, or new technologies that carry significant risk. A DPO can be an employee or an external appointee and is responsible for monitoring compliance, advising the business, and acting as a contact point with the UAE Data Office. Even where a formal DPO is not mandatory, a small business still must comply with the law's core duties — lawful basis, security measures, honouring data-subject rights and breach handling — so assigning clear internal responsibility for data protection is good practice. Because the exact triggers are detailed in the law and its Executive Regulations, confirm your position with the UAE Data Office. For a tailored assessment, you can browse verified UAE legal professionals on LEXAI.

The UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) does not set a single fixed retention period for all data; instead it applies a storage-limitation principle. A controller should keep personal data only for as long as is necessary to fulfil the purpose for which it was collected. Once that purpose is achieved and there is no other lawful ground to retain it, the data should be deleted or anonymised. In practice, retention periods vary by data type and context because other UAE laws — such as commercial, tax, labour or anti-money-laundering rules — may require certain records to be kept for set minimum periods, and those obligations can lawfully justify holding data longer. So there is no universal answer; a business should define and document a retention schedule mapped to each purpose and to any overriding legal requirement, and securely dispose of data when the period ends. As an individual, you can ask a controller why it still holds your data and request erasure where no valid basis remains. Confirm specific retention rules with the relevant authority. For tailored retention-policy advice, you can browse verified UAE legal professionals on LEXAI.

Yes. The UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) recognises your right to object to the processing of your personal data for certain purposes, and direct marketing is a typical example where you can require a business to stop. Where a company uses your data to send you promotional communications, you can withdraw any consent it relied on and object to further marketing processing. In practice you do this by using the opt-out or unsubscribe mechanism the business provides, adjusting your account preferences, or sending a written request to its privacy contact asking it to cease marketing to you. Once you object to marketing, the controller should stop using your data for that purpose, though it may continue to process the same data for other lawful purposes unrelated to marketing, such as fulfilling an order or meeting a legal obligation. Note that electronic marketing is also subject to other UAE telecom and consumer rules. If a business keeps marketing to you after you have clearly opted out, you can raise it with the UAE Data Office. For persistent or commercial disputes, you can compare verified UAE legal professionals on LEXAI.

Federal Decree-Law No. 34 of 2021 on Combating Rumours and Cybercrimes is the UAE's main law for offences committed online or using information technology. It replaced the earlier 2012 cybercrime law and broadened the rules to reflect new online risks. The law covers a wide range of conduct, including online defamation and insults, spreading rumours and false news, electronic fraud and hacking, blackmail and extortion through digital means, invasion of privacy such as publishing someone's photos or data without consent, creating fake accounts, and misusing technology to commit or hide crimes. It applies to acts committed through social media, messaging apps, websites and other electronic networks, and it can reach conduct connected to the UAE even when devices or platforms are abroad. Penalties vary by offence and are set out in the law and applied by the courts, and for non-citizens a conviction can carry immigration consequences. Because the law is detailed and offence-specific, anyone facing a complaint or wishing to file one should get tailored advice. You can compare verified UAE legal professionals on LEXAI familiar with the cybercrime law.

Yes, misleading and false advertising is prohibited under the UAE Consumer Protection Law. Businesses must not deceive consumers about a product's nature, quality, quantity, origin, price, or the benefits of an offer, and they must honour the terms of any advertised promotion. If you bought something because of a claim that turned out to be untrue, that misrepresentation can entitle you to a remedy and can also be reported as a violation. Preserve the advertisement itself, whether it is a screenshot, flyer, social-media post, or in-store sign, alongside your receipt, because the advert is central evidence that the promise was made. Raise the discrepancy with the seller first, then, if unresolved, report it to the Ministry of Economy (600 522225) or your emirate's economic department, which monitor deceptive marketing and bait advertising. Reporting deceptive ads protects other buyers too. Note that genuine puffery and clearly worded conditions are different from outright false claims, so focus on concrete promises the seller failed to keep. For substantial losses caused by a false claim, you can compare verified UAE legal professionals on LEXAI.

At times, individual emirates in the UAE run traffic-fine discount schemes or amnesties, where paying within a set window or maintaining a clean record can reduce the amount owed, but these are time-limited initiatives announced by each emirate's police force rather than a permanent nationwide rule. Programmes such as discounts for prompt payment or for drivers who go a period without violations have been offered by forces like Dubai Police and Abu Dhabi Police, with their own eligibility conditions and deadlines. Because the availability, percentage, and rules change and differ by emirate, you should check current offers directly through the official police app or website for the emirate where the fine was issued, rather than assume a fixed discount applies. Note that discounts generally do not apply to fines tied to serious offences or to cases referred to prosecution. If you have large fines, disputed violations, or fines linked to black points or a criminal referral, you can compare verified UAE legal professionals on LEXAI who handle traffic matters to understand your options.

Clearing a bounced cheque matter in Dubai usually means resolving the underlying debt and then ensuring the case file is formally closed. First, identify whether your case is a civil execution file (the most common route since 2022) or a criminal complaint based on bad-faith conduct. For a civil execution file, settling the amount owed — by full payment or an agreed settlement with the cheque holder — is the core step; the holder or their representative then confirms settlement to the execution court so the file can be closed and any enforcement measures lifted. For a criminal complaint, a waiver (drop of complaint) from the beneficiary is typically central to closing the matter. After settlement, obtain written proof and confirm with Dubai Courts that the file shows as closed and that no travel ban or enforcement order remains active against you. Exact procedures and any fees are set by Dubai Courts, so verify them directly. To navigate settlement, drafting a waiver, or court filings, you can compare verified UAE legal professionals on LEXAI.

If a debt collection company in Sharjah contacts you, treat it like any other collector: first verify who they are and what debt they claim, then check what they can and cannot lawfully do. A collector — whatever its name — can remind you, negotiate, and propose a repayment plan, but it cannot seize assets, freeze accounts, or compel payment; only a UAE court and its execution division can do that. Before paying or signing anything, ask for written proof of the debt and the creditor they represent, and confirm the company is properly established to operate. Never transfer money based on phone pressure alone, and keep records of every interaction. If the contact involves threats, impersonation of officials, or disclosure of your debt to others, that may breach UAE laws on harassment and privacy, and you can document it for the authorities. For peace of mind and to confirm whether the demand is valid, consult verified UAE legal professionals on LEXAI. The UAE Government justice portal explains your protections under the law.

Debt consolidation means combining several debts — such as multiple credit cards and loans — into a single facility with one monthly repayment, ideally on more manageable terms. In the UAE, banks commonly offer debt-consolidation or debt-settlement products to residents, and some salary-linked arrangements let a single lender buy out your other balances so you pay just one institution. Consolidation does not erase what you owe; it restructures it, which can simplify budgeting and reduce missed payments. The right product depends on your income, existing obligations, and the lender's criteria, and the cost of borrowing varies, so compare offers carefully and read the terms before committing. Where consolidation is not enough and you genuinely cannot meet obligations, the UAE's individual insolvency framework may offer a court-supervised restructuring instead. Banking conduct, including collection practices, is subject to consumer-protection oversight. For complex situations or disputes with lenders, legal advice helps. You can compare verified UAE legal professionals on LEXAI. The UAE Government portals on finance and insolvency provide background.