Support Centre

You have out of 5 free articles left for the month

Signup for a trial to access unlimited content.

Start Trial

Continue reading on DataGuidance with:

Free Member

Limited Articles

Create an account to continue accessing select articles, resources, and guidance notes.

Free Trial

Unlimited Access

Start your free trial to access unlimited articles, resources, guidance notes, and workspaces.

International: DIFC issues first California adequacy decision

On August 9, 2023, the Dubai International Financial Centre (DIFC) announced that the Commissioner of Data Protection had issued the first adequacy decision, for the California Consumer Privacy Act of 2018, as amended by the California Privacy Rights Act of 2020 (CCPA as amended). The adequacy decision determines that the CCPA as amended is equivalent to the DIFC Data Protection Law No. 5 of 2020 and that personal data can now be transferred between the DIFC and California without the need for additional safeguards. Further, the DIFC explained that the CCPA as amended not only gives consumers control over their data but also protects personal data collected by businesses in line with global data protection standards.

In addition, the DIFC highlighted that the California Privacy Protection Agency (CPPA) ensures adequate data protection for personal data processed and transferred by entities it supervises.

Jacques Visser, DIFC's Commissioner of Data Protection, said that ''[...] In evaluating California's privacy law and regulations, together with implementation, enforcement, and other holistic factors, it became clear that in large part, California importers will treat personal data from DIFC ethically and fairly.''

You can read the press release here and the adequacy decision here.