Understanding the UAE Personal Data Protection Act (PDPA)
Understanding the UAE Personal Data Protection Act (PDPA) [ Author : Rinu Jacob (CIST, CIGE)] Executive Summary The United Arab Emirates Personal Data Protection Act (PDPA) , introduced in 2021 and enforced from January 2022, marks a significant step in the region's commitment to data privacy and security. This federal law governs the processing of personal data within the UAE, aiming to protect individuals’ rights while providing clear compliance obligations for organizations. This article outlines the key elements of the PDPA, explains the rights of data subjects, details organizational responsibilities and highlights penalties for non-compliance. It also presents practical scenarios and a compliance checklist to help businesses align their data practices with the law. With the rapid digitization of services and increased data flows, protecting personal information has become paramount. The UAE’s PDPA establishes a legal framework to regulate how personal data is collecte...