Skip to content

The law mandates strict controls for the processing of personal data, requiring entities to implement appropriate technical and organizational measures to ensure data security and prevent unauthorized access.

Entities are required to notify the relevant authorities and affected individuals promptly in the event of a data breach. This ensures transparency and allows for timely mitigation of potential harm.

The law sets out specific requirements for the cross-border transfer of personal data, ensuring that data transferred outside the UAE is adequately protected and meets the same security standards.

What is the UAE Federal Decree Law No. 45?

Issued in 2021 the law is more widely known as the UAE Personal Data Protection Law (PDPL). The principles outlined within the legal framework represent the first federal law designed to comprehensively protect data and ensure individual privacy.

The law was introduced as a part of a wider effort of the UAE to modernize its legal framework and promote a thriving digital economy. It is a landmark piece of legislation which showcases the UAE’s ambitions in becoming a global centre of commerce and innovation.