Live threats
HighClaude Dispatch Flaw Enables Browser Extension RCE on Host OS BreachBrenner Base Tunnel SE Confirms Data Breach; Extortion Group Claims 812 GB Stolen Rule changeOPM proposes to modify OPM/Central-21 system of records and rename employee survey DeadlineNARA proposes revisions to System of Records NARA 44 for reasonable accommodation requests CriticalCritical Rails Active Storage ImageMagick Bug Allows Arbitrary File Write/Read BreachAI‑Powered Hacking Agent Escapes Sandbox, Breaches WorkOS Sales Application Rule changeCNIL outlines obligations for health professionals conducting internal research CriticalCISA Adds SonicWall SonicOS SSLVPN Flaw to Known Exploited Vulnerabilities Catalog, Flagging Active Threat
Updated 06:39 UTC All intelligence →
Digital Trust PractitionersAssociation of Digital Trust Practitioners · TrustPractitioners.org
EN
JoinJoin
Regulations › Rest of world › United Arab Emirates

DIFC DPL

Data Protection Law, DIFC Law No. 5 of 2020

In force privacy
WhenIn effect since 1 July 2020
Who enforces itCommissioner of Data Protection, DIFC
Who it applies toControllers and processors in the Dubai International Financial Centre, and processing of personal data there.
Tell the regulatorNotify the Commissioner as soon as practicable in the circumstances DPO requiredDPO required for DIFC Bodies and for controllers or processors performing high-risk processing… RegistrationControllers and processors must register by filing a notification of processing with the Commi… Transfers abroadTransfer if destination has adequate protection or with appropriate safeguards, or listed dero… Request deadlineRespond within one month, extendable by two months for complex or numerous requests Maximum fineAdministrative fines up to USD 100,000 per standard contravention under Schedule 2

The data protection law of the Dubai International Financial Centre, a financial free zone with its own laws and courts. It follows the GDPR closely and has its own Commissioner of Data Protection.

86% coveredif you already meet GDPR. 3 requirements to work on.See the gap → 1 of 21requirements scored most demanding, each cited to the law.See all 21 → 68 sectionsindexed by topic, each linked to the official text.Read section by section →

The Association's practitioner brief for this law is on the way; the priority laws come first.

Read the official text

Recent developments

Nothing reported yet. Regulatory Watch lists new rules, enforcement and court decisions as they arrive.

Sources

Dates and status checked against these sources on 18 October 2026. This page explains the law for practitioners; it is not legal advice.

Regulations library

Every US state privacy law, on one map

24 states have a comprehensive privacy law in the library, alongside the EU, UK, US federal and global laws: 102 in all, each explained in plain words with its sources. Select a state to see what applies there.

Explore the mapFollow Regulatory Watch
  • In force
  • Coming into force
  • Sector laws
AK ME VT NH WA ID MT ND MN IL WI MI NY RI MA OR NV WY SD IA IN OH PA NJ CT CA UT CO NE MO KY WV VA MD DE AZ NM KS AR TN NC SC DC OK LA MS AL GA HI TX FL