Data Protection Law: The Personal Data Protection Law constitutes an integrated framework to ensure the confidentiality of information and protect the privacy of community members by providing proper governance for optimal data management and protection, in addition to defining the rights and duties of all concerned parties.
The provisions of the law apply to the processing of personal data, whether all or part of it through electronic systems, inside or outside the country.
The law prohibits the processing of personal data without the consent of its owner, with the exception of some cases in which the processing is necessary to protect the public interest, or that the processing is related to the personal data that has become available and known to all by an act of the data owner, or that the processing is necessary to carry out any of the legal procedures and rights.
The law defines the controls for the processing of personal data and the general obligations of companies that have personal data and defines their obligations to secure personal data and maintain its confidentiality and privacy.
It also defines the rights and cases in which the owner has the right to request correction of inaccurate personal data, restrict or stop the processing of personal data. The law sets out the requirements for the cross-border transfer and sharing of personal data for processing purposes.
UAE Data Office [next page]
