UAE — DIFC (Dubai): data protection and AI governance
DIFC Data Protection Law No. 5 of 2020 (DIFC DP Law No. 5/2020), in force since 2020-07-01. Supervisory authority: DIFC Commissioner of Data Protection.
Other languagesFrançaisEspañolالعربية中文
Data protection
- Instrument
- DIFC Data Protection Law No. 5 of 2020 (DIFC DP Law No. 5/2020)
- In force since
- 2020-07-01
- Authority
- DIFC Commissioner of Data Protection
- Penalties
- Jusqu'à 100 000 USD + amendes discrétionnaires
- Key obligations
- Aligné RGPD
- DPO certains cas
- Notification 72h
- Transferts encadrés
- Source
- https://www.difc.ae/
Key obligations and penalties are quoted from the record as the source states them; they are not translated.
What the engine decides here
Indicative coverage
This jurisdiction's legal attributes are not modelled yet: no decision is staked on it. The engine flags the uncertainty in its response rather than assuming a permissive regime. Not knowing is an answer; guessing is not.
Three decisions, computed just now
Same actions, this jurisdiction's context. These answers come out of the engine as the page renders, from the same function the API calls.
- Allow
Read an internal contract
Low-risk operation
- Allow
Send a customer record to US_FED
Low-risk operation
- Deny
Decide on a job application
Decision reserved for a human
Advisory decisions. StructureClerk decides; your infrastructure enforces.
Do your agents operate in UAE — DIFC (Dubai)?
The authority API makes these attributes executable: an ALLOW, APPROVE, DENY or ESCALATE decision before the agent acts, with signed evidence any third party can verify.