Data Protection Laws of the World Handbook: Second Edition - UAE

DATA PROTECTION OFFICERS

There is no requirement in the UAE for organisations to appoint a data protection officer.

COLLECTION AND PROCESSING

If the collection and processing of any personal data pertains to an individual's private or family life then the consent of the individual is required. A failure to obtain such consent would constitute a breach of the Penal Code (Article 378) and could also be a breach of the:

• Cyber Crime Law if the personal data is obtained or processed through the internet or electronic devices in general (Articles 21 and 22); and
• Telecoms Law to the extent that data is obtained through any means of telecommunication, including through a telecommunications service provider, or any other electronic means (Clause 3 Privacy of Consumer Information Policy).