Data Protection Obligations: Organisational Governance

Overview

An organisation must take responsibility for ensuring that it develops, implements and maintains effective policies, systems and procedures for complying with its accountability duties under data protection legislation.

Definitions

  • ADGM: Abu Dhabi Global Market.

  • Personal data: Any information relating to a data subject.

  • Data subject: An identified or identifiable living natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

  • Controller: The natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purpose and means of the processing of personal data.

  • Court: Any of the courts established pursuant to article 10 of Abu Dhabi Law No. 4/2013 On the Global Marketplace Abu Dhabi.

  • Processor: A natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.