Support Centre

You have out of 5 free articles left for the month

Signup for a trial to access unlimited content.

Start Trial

Continue reading on DataGuidance with:

Free Member

Limited Articles

Create an account to continue accessing select articles, resources, and guidance notes.

Free Trial

Unlimited Access

Start your free trial to access unlimited articles, resources, guidance notes, and workspaces.

DIFC: DIFC announces amendments to data protection law

The Dubai International Financial Centre ('DIFC') announced, on 8 March 2022, that it had enacted the DIFC Laws Amendment Law, DIFC Law No. 2 of 2022 to incorporate amendments to several DIFC laws, including the DIFC Data Protection Law No. 5 of 2020 ('the Data Protection Law'), to ensure that the DIFC's regulatory framework aligns with international best practice. In particular, the DIFC stated that amendments to the Data Protection Law reflect its commitment to maintain its position at the forefront of privacy legislation in the region and include the following: 

  • clarifying the process for judicial redress for individuals;
  • strengthened accountability requirements for controllers and processors in the context of requests for access to data considered vexatious or repetitive;
  • refined powers of the Commissioner of Data Protection when rendering a direction or determination of contravention of the Data Protection Law; 
  • clarifications with regards to rules of interpretation in connection with the Data Protection Law, including what is meant by a 'business day'; and 
  • the addition of a $75,000 penalty for failure to comply with a direction of the Commissioner of Data Protection in accordance with Article 59(4) of the Data Protection Law. 

You can read the press release here and the amendments here.