Processing special categories of personal data requires special consideration. An organisation processing personal data must understand the categories of data, and must have a process to identify, define, and document the purpose and corresponding legal basis for processing sensitive or other special categories of personal data.

• Applicable law: All applicable laws, statutes, codes, ordinances, decrees, rules, regulations, municipal by-laws, judgments, orders, decisions, rulings or awards of any government, quasi-government, statutory or regulatory bodies, ministries, government agencies or departments, courts, agencies or associations of a competent jurisdiction.

• Controller: Any person who alone or jointly with others, determines the purposes and means of the processing of personal data.

• Data subject: The identified or identifiable natural person to whom personal data relates to.

• Commissioner: The person appointed by the President pursuant to article 43(1) of DIFC Law No. 5/2020 to administer the law.

• Court: The DIFC Court as established under Dubai laws.

• Controller: Any person who alone or jointly with others, determines the purposes and means of the processing of personal data.

• DIFC: Dubai International Financial Centre.