Ask Reggi Your Question Now
Can you summarize Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data?
United Arab Emirates Bill - Others > Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data
Short Summary
The Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data governs the protection of personal data in the United Arab Emirates. It applies to data subjects, controllers, and processors within the country. The Decree-Law sets out definitions for terms such as personal data, sensitive personal data, biometric data, and data subject. It establishes obligations for controllers, including the need to take appropriate technical and organizational measures to protect personal data, maintain accurate and updated data, and ensure secure storage and protection of personal data. The Decree-Law also addresses the conditions for consent to data processing, general obligations of controllers and processors, and the power of exemption for the UAE Data Office. It provides exemptions for certain types of data and entities. The document does not specify penalties for non-compliance. Overall, the Decree-Law aims to ensure the protection and privacy of personal data in the United Arab Emirates.
Whom does it apply to?
The Decree-Law applies to any data subject who resides or has a place of business in the United Arab Emirates, as well as any controller or processor located in the United Arab Emirates who processes personal data of data subjects inside or outside the country.
What does it govern?
The Federal Decree-Law No. 45 of 2021 governs the protection of personal data in the United Arab Emirates.
What are exemptions?
The Decree-Law does not apply to government data, government authorities that control or process personal data, personal data held with security and judicial authorities, a data subject who processes his/her data for personal purposes, health personal data subject to legislation regulating its protection and processing, banking and credit personal data subject to legislation regulating its protection and processing, and companies and institutions located in the free zones of the United Arab Emirates subject to special legislation on personal data protection.
What are the Penalties?
Penalties for non-compliance with the Decree-Law are not specified in the provided document.
Jurisdiction
United Arab Emirates