ہوم › قوانین کی لائبریری › UAE PDPL
UAE PDPL
Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data
ذرائع کے ساتھ · 12/14 حقائق کی دو ذرائع سے تصدیق ہوئی. آخری تصدیق 10 اکتوبر، 2026
اگلی مکمل جانچ: . ریگولیٹرز کی خبریں ہر ماہ دیکھی جاتی ہیں؛ تبدیلیاں درج ہوتی ہیں: تبدیلیوں کا ریکارڈ.
اس صفحے کا حوالہ دیں: GlanceDesk Jurisdiction, “UAE PDPL (United Arab Emirates (onshore; excludes DIFC and ADGM free zones))”, glancedeskjurisdiction.com/laws/ae-pdpl, last verified 10 October 2026.
United Arab Emirates (onshore; excludes DIFC and ADGM free zones) پرائیویسی
- حیثیت
- In force since 2 January 2022, but Executive Regulations still not issued as of July 2026, so many operational details are pending.✓
- یہ کن پر لاگو ہوتا ہے
- Processing of data of people living or doing business in the UAE; UAE-based controllers/processors whatever the data subject's location; and foreign controllers/processors handling data of people in the UAE (extraterritorial). Leaves DIFC and ADGM laws intact.✓
- سائز کی حدیں
- No size or volume threshold; applies to any covered organisation. DPO duty is triggered by high-risk or large-scale sensitive data processing.✓
- ریگولیٹر
- UAE Data Office (nominal regulator, not fully operational); consolidated into the UAE Artificial Intelligence and Data Authority, established 14 June 2026.
- خلاف ورزی یا واقعے کی رپورٹنگ
- Notify the Data Office immediately on becoming aware of a breach that harms privacy (Art. 9); exact deadline and procedure await the Executive Regulations.✓
- ذاتی ڈیٹا کی درخواستوں کے جواب کی آخری تاریخ
- No fixed deadline in the Decree-Law: requests are free and corrections must be made without undue delay. DLA Piper cites one calendar month, extendable by two months, but this is not in the statute and may come with the Executive Regulations.✓
- ڈیٹا پروٹیکشن آفیسر
- Required for high-risk processing using new technologies, systematic assessment/profiling of sensitive data, or large volumes of sensitive data (Art. 10). Can be staff or contractor; need not be UAE-based.✓
- مقامی نمائندہ
- No local representative requirement in the Decree-Law.✓
- ڈیٹا بیرونِ ملک بھیجنا
- Restricted. Allowed to jurisdictions approved as adequate by the Data Office or under listed exceptions (e.g., consent, contract); details await Executive Regulations.✓
- کوکیز اور رضامندی
- Consent is the default legal basis, with exceptions (contract, legal claims, public interest, health). No cookie-specific rules. People can object to direct marketing and related profiling (Art. 17).✓
- زیادہ سے زیادہ سزا
- PDPL itself sets no fines; a Cabinet decision on violations and penalties is pending. The Cybercrime Law (Decree-Law 34/2021) may apply: detention and/or AED 50,000–500,000.✓
جن حقائق پر “تصدیق جاری ہے” لکھا ہے ان کی ابھی تصدیق ہو رہی ہے اور انہیں جواب کے طور پر نہیں دیا جاتا۔
آپ کو کیا کرنا ہوگا✓
- Map processing of UAE residents' data, including offshore processing of it.
- Get clear consent or document another permitted legal basis before processing.
- Appoint a DPO if you run high-risk or large-scale sensitive data processing.
- Set up a breach process to notify the Data Office immediately once a breach is known.
- Restrict transfers outside the UAE to approved countries or listed exceptions.
- Honour access, correction, erasure and objection requests, including opt-outs from direct marketing.
- Monitor for the Executive Regulations; a 6-month adjustment window is expected after they are issued.
حالیہ تبدیلیاں
Executive Regulations still pending (July 2026). UAE AI and Data Authority established 14 June 2026, absorbing the Data Office. New Child Digital Safety Law bans collecting under-13s' data without verified parental consent.
ذرائع
- بنیادی ذریعہ: https://u.ae/en/about-the-uae/digital-uae/data/data-protection-laws
- دوسرا ذریعہ: https://www.ashurstperkinscoie.com/en/insights/data-bytes-67-your-emea-data-privacy-update-for-july-2026/
- ریگولیٹر: UAE Data Office (nominal regulator, not fully operational); consolidated into the UAE Artificial Intelligence and Data Authority, established 14 June 2026.
آزادانہ جانچ کے لیے استعمال ہونے والے ذرائع (6)
- https://u.ae/en/about-the-uae/digital-uae/data/data-protection-laws
- https://www.tamimi.com/law_update_articles/uae-establishes-new-federal-authority-for-ai-and-data-a-significant-step-in-the-evolution-of-digital-regulation/
- https://www.morganlewis.com/pubs/2026/06/uae-establishes-federal-authority-for-artificial-intelligence-and-data
- https://uaelegislation.gov.ae/en/legislations/1972/download
- https://www.dlapiperdataprotection.com/index.html?t=law&c=AE
- https://gulfnews.com/uae/government/detention-fine-up-to-dh500000-for-illegal-possession-and-use-of-personal-data-uae-public-prosecution-warns-1.85290355
= دو آزاد ذرائع سے تصدیق شدہ، جن میں کم از کم ایک سرکاری ہے۔ ہم تصدیق کیسے کرتے ہیں
صرف معلومات، قانونی مشورہ نہیں۔ قوانین بدلتے رہتے ہیں؛ اس صفحے پر انحصار کرنے سے پہلے ریگولیٹر یا کسی مستند وکیل سے تصدیق کریں۔ کوئی غلطی نظر آئی؟ ای میل کریں contact@