Federal Decree-Law No. 45 of 2021 Regarding the Protection of Personal Data (UAE) - PDPL

The UAE Federal Decree-Law No. 45 of 2021 Regarding the Protection of Personal Data (UAE PDPL) is the UAE’s federal data protection legislation governing the processing, collection, storage, use, disclosure, and transfer of personal data. The law establishes obligations for data controllers and processors, provides individuals with rights over their personal information, regulates sensitive personal data processing, introduces consent and transparency requirements, and sets rules for cross-border data transfers. The UAE PDPL represents the country’s comprehensive privacy framework and aligns with international data protection principles, including concepts reflected in the EU GDPR.