General UAE Legal Questions LawLaw No. (22) of 2023 Concerning the Dubai Digital Authority

Article (2) The following words and expressions, wherever mentioned in this Law, will have the meaning indicated opposite each of them unless the context implies otherwise: UAE: The United Arab Emirates. Emirate: The Emirate of Dubai. Ruler: His Highness the Ruler of Dubai. Crown Prince: The Crown Prince of Dubai. Government: The Government of Dubai. DDA: The Dubai Digital Authority. Director General: The director general of the DDA. Government Entity: Any of the Government departments; public agencies and corporations; Government councils; public authorities, including the authorities supervising Special Development Zones and free zones, such as the Dubai International Financial Centre; or other public entities affiliated to the Government. Judicial Authorities: This includes the Dubai Courts and the Public Prosecution. Private Entity: Any for-profit or non-profit non-government legal entity, including sole proprietorships. Vital Private Sector Entity: A Private Entity classified as a vital entity as per the classification system approved by the Director General.

-- 2 of 10 --

Law No. (22) of 2023 Concerning the Dubai Digital Authority Page 3 of 10 Affiliated Entities: The entities affiliated to the DDA pursuant to this Law. Digital Transformation: All means supporting the transformation of the Emirate into a digital city, including technical infrastructure; Digital Services; digital applications; Digital Data Platforms; and information technology and Data protection policies and strategies. Digital Services: Any of the Government, judicial, or non-government services provided to Customers through Digital Channels. Digital Channels: Websites, digital applications, and other media through which Digital Services are provided and made available. Digital Platform: A digital system adopted by the DDA for providing Digital Services, which comprises hardware, software, networks, storage systems, and a connectivity and communication website. Scope of Application

Article (5) The DDA aims to: 1. promote the Emirate as a digital city and establish its leadership and global competitiveness;

-- 3 of 10 --

Law No. (22) of 2023 Concerning the Dubai Digital Authority Page 4 of 10 2. contribute to enhancing the effectiveness and efficiency of Government performance through enabling Government Entities, Judicial Authorities, and Private Entities in the Emirate to automate their work and activities and to provide their services through Digital Channels; 3. contribute to enhancing the quality of life and achieving the welfare of all members and segments of the community through digitising various aspects of life in the Emirate; 4. support decision makers in devising strategies, development policies, and plans and in measuring the strategic performance of Digital Transformation through providing the necessary Data and Statistics; and 5. support the Government’s efforts in achieving comprehensive development in the Emirate through providing digital systems, Digital Platforms, and shared Digital Channels; and facilitating the exchange of information and Data amongst Government Entities, Judicial Authorities, and Private Entities. Functions of the DDA

Article (6) a. The DDA is the competent official entity in the Emirate that is exclusively authorised to represent the Government and Government Entities before federal and local entities in the UAE, and regional and international organisations, in respect of all matters related to devising, approving, and administering the plans, policies, and strategies related to information technology, Data, Statistics, and Digital Transformation. b. Without prejudice to the functions legally assigned to Affiliated Entities, the DDA will, for the purposes of achieving its objectives, have the duties and powers to: 1. formulate, in coordination with the Competent Entities, the strategies and initiatives required to enhance Digital Transformation in the Emirate; submit the same to the Executive Council for approval; and follow up their implementation; 2. approve, and follow up the implementation of, the operational and implementation plans for the strategies, policies, programmes, and initiatives required enhance Digital Transformation; 3. approve and administer performance indicators for the implementation of Digital Transformation strategies, policies, plans, initiatives, and projects in fields pertaining to information technology, Data, Statistics, and Digital Transformation; and submit the relevant reports to the Competent Entities in the Emirate;

-- 4 of 10 --

Law No. (22) of 2023 Concerning the Dubai Digital Authority Page 5 of 10 4. follow up and assess compliance with the legislation, regulations, policies, standards, and manuals adopted at the Emirate’s level in fields related to the work of the DDA and Affiliated Entities by conducting evaluation, audit, and control; giving feedback, and taking corrective measures; 5. propose new legislation, and review the existing legislation, pertaining to information technology, Data, Statistics, and Digital Transformation; and submit the same to the Competent Entities in the Emirate to take the necessary action in respect thereof; 6. approve and administer, in coordination with the Competent Entities, the policies, regulations, standards, and manuals in the fields related to information technology, Data, Statistics, and Digital Transformation at the Emirate’s level; 7. enhance compliance with the legislation, regulations, policies, standards, and manuals pertaining to Digital Transformation in the Emirate; prepare the relevant reports; and submit the same to the Crown Prince to issue the relevant directives as he deems appropriate; 8. approve, in coordination with the Competent Entities, the plans, budgets, initiatives, and projects pertaining to information technology, Data, Statistics, and Digital Transformation; 9. support the Government’s efforts in ensuring optimum use of technical resources with a view to supporting Digital Transformation in the Emirate; 10. provide opinion, in coordination with the Competent Entities in the Emirate, on the draft local and federal legislation and international treaties and conventions pertaining to any areas within the scope of functions of the DDA or the Affiliated Entities; 11. encourage Government Entities, Judicial Authorities, and Private Entities to engage in the Digital Transformation process; improve their digital maturity; and propose the relevant incentive programmes; 12. develop, qualify, and attract skilled human resources and talents in digital fields, in coordination with the Competent Entities; 13. boost digital economy, identify gaps in the digital infrastructure supporting that economy and the digital skills available in the Emirate; and address the gaps in coordination with the Competent Entities; 14. support the Emirate’s efforts in attracting, developing, enabling, and supporting information technology and telecommunications companies, in coordination with the Competent Entities;

-- 5 of 10 --

Law No. (22) of 2023 Concerning the Dubai Digital Authority Page 6 of 10 15. conduct the studies and research, and keep abreast of the best practices and methodologies, related to Digital Transformation; 16. conclude agreements and memoranda of understanding, and enter into partnerships, with local, regional, and international institutions with a view to supporting Digital Transformation; 17. cooperate and coordinate with all federal and local entities concerned with enhancing Digital Transformation; and 18. exercise any other duties or powers required for the achievement of the objectives of the DDA, as assigned to it by the Ruler or the Crown Prince. Affiliated Entities:

Article (10) a. The Director General will supervise the work and activities of the DDA and Affiliated Entities and will manage the affairs of the DDA. The Director General will be directly responsible to the Crown Prince for performing the duties assigned to him under this Law, the resolutions issued in pursuance hereof, and other legislation in force in the Emirate. In particular, the Director General will have the duties and powers to: 1. prepare, in consultation with the Competent Entities in the Emirate, the strategic plans and general policies of the DDA; present the same to the Crown Prince for approval; and follow up their implementation; 2. approve, and follow up the implementation of, the strategic plans and general policies of the Affiliated Entities; 3. approve, and follow up the implementation of, the initiatives, programmes, and projects of the DDA and Affiliated Entities; 4. approve the draft annual budgets of the DDA and Affiliated Entities, and submit the same to the Competent Entities in the Emirate for final approval; 5. approve the Financial Statements of the DAA and Affiliated Entities, and submit the same to the Competent Entities in the Emirate for final approval; 6. submit periodic reports to the Crown Prince on the implementation of Digital Transformation strategic plans; 7. approve the organisational structures of the DDA and Affiliated Entities, and submit the same to the Competent Entities for final approval; 8. approve the bylaws and resolutions regulating the administrative, financial, and technical work of the DDA and Affiliated Entities;

-- 7 of 10 --

Law No. (22) of 2023 Concerning the Dubai Digital Authority Page 8 of 10 9. represent the DDA and Affiliated Entities before third parties; 10. conclude the contracts, agreements, and memoranda of understanding to which the DDA or any of the Affiliated Entities is a party, in accordance with the delegation of authority matrix adopted in this respect; 11. approve the delegation of contracting authority matrix of the DDA and Affiliated Entities; 12. form permanent or temporary committees and work teams, from amongst the Employees of the DDA and Affiliated Entities or other persons; and determine the functions of these committees and work teams; 13. approve the fees and charges for the services provided by the DDA and Affiliated Entities, and submit the same to the Competent Entities in the Emirate for final approval pursuant to the legislation in force; 14. evaluating the performance of the executive directors/ chief executive officers of the Affiliated Entities; 15. supervise the executive body of the DDA and issue the resolutions governing human resources and appointment of Employees, in accordance with the regulations adopted by the DDA and the legislation in force in the Emirate; and 16. exercise any other duties or powers vested in the Director General under the legislation in force in the Emirate, or assigned to him by the Ruler or the Crown Prince. b. The Director General may delegate any of his duties and powers under paragraph (a) of this Article to any of the executive directors/chief executive officers, or other Employees, of the DDA or Affiliated Entities, provided that such delegation is specific and in writing. Financial Resources of the DDA

Article (14) a. Government Entities, Judicial Authorities, and Vital Private Sector Entities must fully cooperate with the DDA and Affiliated Entities; meet their requirements; and provide them with the Data, information, documents, Statistics, and studies they request, as required to enable them to achieve their objectives and perform their functions under this Law, the resolutions issued in pursuance hereof, and other legislation in force in the Emirate. b. Where required, the DDA may prepare a detailed report on the level of cooperation and compliance by the Government Entities, Judicial Authorities, and Vital Private Sector Entities in satisfying the relevant requirements and conditions prescribed by the DDA and Affiliated Entities. The DDA will submit that report to the Crown Prince to issue the relevant directives as he deems appropriate. Issuing Implementing Resolutions