United Arab Emirates Federal Data Protection Law: Scope and Applicability

The United Arab Emirates (UAE) Federal Personal Data Protection (PDP) Law No. 45 of 2021 (UAE PDP Law), which came into effect on 2 January 2022, provides a legal framework to ensure the security and privacy of personal information.

The law is designed to protect and empower UAE citizens' and residents' data privacy rights to reshape the way organizations address data security and privacy requirements. The UAE cabinet has established the UAE Data office as Competent Supervisory Authority to ensure federal law enforcement. Once the Executive Regulations are issued, organizations will need to comply with UAE PDP Law within a period of 6 months.