Sector Specific Data Privacy

Overview

The dedicated laws on the protection of personal data, in the United Arab Emirates (UAE), are as follows:

  • Federal Decree-Law No. 45/2021 On the Protection of Personal Data.

  • DIFC Law No. 5/2020 Data Protection Law.

  • ADGM Data Protection Regulations.

Apart from aforementioned dedicated laws, provisions regarding protection of privacy of individuals can be found in following sector specific laws:

  • Federal Decree-Law No. 34/2021 Concerning the Fight Against Rumors and Cybercrime.

  • Federal Decree-Law No. 14/2018 On the Central Bank and the Organisation of Financial Institutions and Activities.

  • Federal Decree-Law No. 3/2003 On Organising the Telecommunications Sector.

  • Federal Law No. 2/2019 On the Use of the Information and Communication Technology (ICT) in Health Fields.

The significant provisions concerning privacy or data protection in the above-mentioned sector specific laws, are discussed below.

Definitions

  • Information technology (IT): All forms of technologies used for creating, processing, storing, exchanging and using electronic information systems (ISs), information programs, websites, information network, and any means of information technology equipment (ITE).

  • IS: Information system.

  • ITE: Information technology equipment.