DIFC And ADGM Data Protection Regimes

The UAE has developed a multi-layered data protection framework that reflects both its federal legal system and the autonomy of its financial free zones. Businesses operating in the UAE must be aware that data protection obligations—including breach notification requirements—vary depending on where an entity is established and how personal data is processed.

The UAE Federal Personal Data Protection Law established the baseline data protection regime applicable across the onshore UAE effective 2 January 2022. It is broadly inspired by the EU General Data Protection Regulation (GDPR), and is designed to regulate the processing of personal data relating to identifiable natural persons.