Category · Q&A index
Data Protection
UAE Personal Data Protection Law (PDPL): consent, lawful processing, breach notification, cross-border transfer.
- Governing law
- FDL-45-2021
72HOURS
Data breach notification deadline to DFSA
AED 500,000
Maximum fine for processing without lawful basis
Explicit
Consent type required for sensitive personal data
Prior
Approval required before cross-border data transfer
Start here
01
I need to report a data breach quickly
Learn about UAE's mandatory 72-hour data breach notification requirement, who to notify, and what information must be disclosed to authorities and affected individuals.
1 question
02
I'm collecting customer data and need consent
Understand when explicit consent is required for processing personal data in the UAE, consent validity rules, and exemptions under ADIB and Federal Law No. 45 of 2021.
1 question
03
I want to know what data companies hold on me
Discover your rights as a data subject to access, correct, or delete personal information held by organizations in the UAE, and how to exercise these rights.