International: DIFC issues first California adequacy decision
On August 9, 2023, the Dubai International Financial Centre (DIFC) announced that the Commissioner of Data Protection had issued the first adequacy decision, for the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (CCPA as amended). The adequacy decision determines that the CCPA as amended is equivalent to the DIFC Data Protection Law No. 5 of 2020 and that personal data can now be transferred between the DIFC and California without the need for additional safeguards. Further, the DIFC explained that the CCPA as amended not only gives consumers control over their data but also protects personal data collected by businesses in line with global data protection standards.
In addition, the DIFC highlighted that the California Privacy Protection Agency (CPPA) ensures adequate data protection for personal data processed and transferred by entities it supervises.
Jacques Visser, DIFC's Commissioner of Data Protection, said that ''[...] In evaluating California's privacy law and regulations, together with implementation, enforcement, and other holistic factors, it became clear that in large part, California importers will treat personal data from DIFC ethically and fairly.''