Personal Data Protection System
- legislationPage.publishedOn
- legislationPage.country
- legislationPage.countries.AE
- legislationPage.category
- legislationPage.categories.ai-governance
- legislationPage.origin
- legislationPage.origins.arabic
The Federal Decree-Law on Personal Data Protection regulates the processing of personal data, ensuring the protection of individual privacy and fostering trust in the digital economy. It also defines the rights of data subjects and the obligations of data processors in accordance with principles of transparency, security, and accountability, and in alignment with international best practices.
Federal Decree-Law No. (45) of 2021 on Personal Data Protection aims to regulate the processing of personal data and protect individual privacy within an integrated legal framework. It applies to most data collection, use, storage, and disclosure operations both within and outside the State, in cases determined by the Law. It also grants data subjects rights including access to their data, rectification, and requesting its erasure or restriction of processing in specific cases. It obliges data controllers and processors to adopt appropriate security measures and ensure transparency and accountability in processing operations. The Law regulates the transfer of personal data outside the State according to specific controls that ensure an adequate level of protection. It is considered one of the most prominent legislations supporting digital transformation and the responsible use of data and artificial intelligence technologies in the United Arab Emirates.