The DIFC Data Protection Law 2019: How To Manage Personal Data (Part 2)

Following our first article on the key changes to the DPL 2019, DIFC-based companies now need practical advice on how their organisations should manage the Personal Data they Process as part of their business operations. Undefined capitalised terms in this article have the same definitions as provided in the first article of this series.

What should you do if a governmental authority requests that you share the Personal Data you hold?

Before sharing any Personal Data with a federal governmental authority, a company's Controller must satisfy all the following conditions:

• exercise reasonable caution and diligence regarding the validity of the request (e.g. ensuring that the authority has the power to make the particular request);