UAE Data Protection / Privacy LawFederal Decree by Law No. (44) of 2021 Establishing of the Emirates Data Office

Article (3) Competences of the Office The Office shall: 1. Propose and develop the policies, strategies, and legislation of the Data Protection in coordination with the concerned authorities and supervise their implementation upon the approval of the Cabinet. 2. Propose and approve the basics and standards for monitoring the application of the federal legislation regulating Data Protection in coordination with the competent authorities. 3. Prepare and approve systems for complaints and appeals related to Data Protection, in coordination with the competent authorities. 4. Issue the necessary guides and instructions for implementing Data Protection legislation. 5. Implement control over the application of federal legislation regulating Data Protection and conduct the necessary investigations to ensure compliance with such legislation. 6. Receive and verify complaints and appeals related to Data Protection with all competent authorities. 7. Spread awareness regarding Data Protection provisions and requirements by organising conferences, seminars, workshops, and others. 8. Conduct specialised studies and research in the fields related to the competencies of the Office including, monitoring, and analysing the regional and international risks and guidelines. 9. Propose joining or signing the international conventions and agreements and propose the partnership agreements with the gulf, regional and international states, organisations, and bodies with regards to the activities and competencies of the Office or joining them, in coordination with Ministry of Foreign Affairs and International Cooperation and other concerned authorities. 10. Represent the State in the regional and international organisations, exhibitions, and conferences in the fields to which the Office is competent, in coordination with Ministry of Foreign Affairs and International Cooperation and other concerned authorities; and 11. Any other competencies authorised to the Office in accordance with the laws or

-- 2 of 5 --

Federal Decree by Law of 2021 Establishing of the Emirates Data Office 3 regulations and resolutions issued by the Cabinet.

Article (4) Director General The Office shall have a Director General whose appointment and rank shall be determined by a Federal Decree. The Director General shall assume the following tasks and functions: 1. Propose draft laws, decrees, regulations, and resolutions related to the Office, and submit them to the Cabinet to take the necessary actions in their regard. 2. Follow up on the preparation of the annual budget draft and the final account of the Office and submit them to the Ministry of Finance and follow up on the implementation of the budget within the appropriations established for it. 3. Supervise the workflow in the Office, follow up on its achievements and the results of its performance, and propose the necessary systems and procedures to contribute to improving and developing performance. 4. Appoint office staff and issue resolutions related to them, in accordance with human resources legislation in force in the Federal Government. 5. Conclude contracts, agreements, and memoranda of understanding necessary to implement the functions of the office, in accordance with the legislation in force in the Federal Government. 6. Represent the Office before the judiciary, third parties and the relevant authorities inside and outside the State. 7. Submit an annual report on the office's work and achievements to the Cabinet. 8. Any other competencies authorised to the Office in accordance with the laws or regulations and resolutions issued by the Cabinet; and The Director General may delegate some of his powers to any senior staff member of the Office as he deems appropriate, provided that the delegation is in writing and specific.