Clifford Chance

The DIFC Data Protection Law - proposed amendments

30 September 2019

In June 2019, the Dubai International Financial Centre ("DIFC") issued a public consultation on its proposed new Data Protection Law (the "Proposed Law"). The Proposed Law will replace the 2007 DIFC data protection law (as amended) and aligns the DIFC's regulatory framework more closely with international data protection developments, including the General Data Protection Regulation (GDPR).

Clifford Chance provided comments to the DIFC on the Proposed Law and in this briefing we note some of the salient features of the Proposed Law that will affect the data processing operations of companies operating in the DIFC.

Some key changes include requirements for processing data outside the DIFC, stricter consent requirements, impact on data transfers, requirements for a Data Protection Officer and Data Protection Impact Assessments and more rights for data subjects.

 

Download PDF