Global Law Experts Logo

Find a Global Law Expert

Specialism
Country
Practice Area
awardsr

Awards

Since 2010, the Global Law Experts annual awards have been celebrating excellence, innovation and performance across the legal communities from around the world.

DIFC Data Protection Law – Actions Required by Businesses

posted 4 years ago

EXECUTIVE SUMMARY

The Dubai International Financial Centre (“DIFC”)Data Protection Law 2020 (DIFC Law No. 5 of 2020) (the “Law”) and the DIFC Data Protection Regulations (the “Regulations”) came into force on 1st July 2020 in response to the rapid global technological changes.

The DIFC announced that businesses had until 1st October 2020 to bring their operations into compliance with the new requirements, as after this time, the Data Commissioner may take enforcement action for any failures to comply with the Law and Regulations.

The purpose of the Law is to provide standards and controls for the Processing and free movement of Personal Data by a Controller or Processor and to protect the fundamental rights of Data Subjects.

The Law brings the DIFC in line with other data protection regimes elsewhere in the world, including the EU General Data Protection Regulation ((EU) 2016/679) (“GDPR”) which replaced the regime established by the Data Protection Act 1998.

This article highlights the key provisions of the Law so that businesses are aware of them and the steps that need to be taken to ensure compliance.

WHAT IS THE SCOPE?

In addition to any business registered in the DIFC, the Law applies to:

(1)any business which processes Personal Data within the DIFC “as part of stable arrangements”; and

(2)any business which processes data on behalf of a business incorporated in the DIFC (regardless of whether the Processing takes place inside the DIFC or outside).

Under the Law, processing “in the DIFC” occurs when the means or personnel used to conduct the processing activity are physically located in the DIFC, and processing “outside the DIFC” is interpreted accordingly.

WHAT IS PERSONAL DATA?

Personal Data is defined as “any information referring to an identified or Identifiable Natural Person”.

Identified Natural Person” means a natural living person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to his biological, physical, biometric, physiological, mental, genetic, economic, cultural or social identity.

The Law provides that Personal Data must be processed in accordance with the application of Data Subject rights and processed in a transparent manner, and explains that Special Categories of Personal Data shall not be processed unless certain conditions apply, as listed under the Law.

WHAT ARE THE REQUIREMENTS?

A Controller or Processor is any person who alone or jointly with others determines the purposes and means of the Processing of Personal Data.

Controllers and Processers must now both be able to demonstrate their compliance with the data protection principles in the Law, as follows:

(1)Appoint a Data Protection Officer (see below);

(2)Ensure consent is freely given;

(3)Ensure a lawful basis for processing;

(4)Establish Data Protection Impact Assessments(“DPIA”)for High Risk Processing Activities (see below) and ensure consultation with the Commissioner where a DPIA is required;

(5)Lawful, fair and transparent processing, in accordance with Data Subjects’ rights;

(6)Maintain records by Controllers and Processors;

(7)Register with the Commissioner, establish a compliance program for the Law and appropriate technical and organizational measures, and implementation of privacy design and by default;

Breach notifications are required:

(1)to the Data Subject -for Personal Data Breaches which are likely to result in a high risk to the security or rights of a Data Subject, the Controller must communicate the Personal Data Breach to an affected Data Subject as soon as practicable in the circumstances; and

(2)to the Commissioner -as soon as practicable in the circumstances if there is a Personal Data Breach that compromises a Data Subject’s confidentiality, security or privacy (section 41 of the Law)

Processors and Sub-Processors requirements are as follows:

(1)Authorisation from Controllers for Sub-Processors –to inform Controllers of any intended changes relating to the addition or the replacement of a Sub-Processor; and

(2)Legally Binding Agreements –are required between Data Processor and Sub-Processors.

APPOINT A DATA PROTECTION OFFICER

Businesses must appoint a Data Protection Officer for:

(1)DIFC bodies (other than the courts acting in their judicial capacity);

(2)Controllers or processers performing “high-risk processing activities” (as indicated below) on a systemic or regular basis; and

(3)As required by the Commissioner.

WHAT ARE HIGH RISK PROCESSING ACTIVITIES?

High Risk Processing Activities includes processing of Personal Data where one or more of the following applies:

(1)Processing that includes the adoption of new or different technologies or methods, which creates a materially increased risk to the security or rights of a Data Subject or renders it more difficult for a Data Subject to exercise his rights;

(2)A considerable amount of Personal Data will be Processed (including staff and contractor Personal Data) and where such Processing is likely to result in a high risk to the Data Subject, including due to the sensitivity of the Personal Data or risks relating to the security, integrity or privacy of the Personal Data;

(3)The Processing will involve a systematic and extensive evaluation of personal aspects relating to natural persons, based on automated Processing, including Profiling, and on which decisions are based that produce legal effects concerning the natural person or similarly significantly affect the natural person; or

(4)A material amount of Special Categories of Personal Data is to be Processed.

WHAT ARE THE RIGHTS OF DATA SUBJECTS?

One of the main changes introduced by the Law is the enhancement of data subject rights with reference to personal data by clarifying the scope of existing rights and giving additional rights.

The Law includes the rights detailed in the DIFC Data Protection Law 2007 below:

(1)Right to rectification of personal data;

(2)Right to access personal data;

(3)Right to erasure or blocking of personal data; and

(4)Right to object to the processing of personal data under certain circumstances.

The Law now includes additional rights, as follows:

(1)Right to access within 1 to 2 months depending on the complexity of the request;

(2)Right to withdraw consent at any time;

(3)Right to object to automated decision making, including profiling;

(4)Right to data portability –the right to receive a copy of your own personal data; and

(5)Right to non-discrimination when the data subject exercises any of their rights.

CONSENT AND LEGITIMATE INTERESTS

Under the Law, Consent must be freely given and unambiguous. Consent can be withdrawn by the Data Subject at any time.

DATA EXPORT AND SHARING

An adequate level of protection is required for the transfer and sharing of data outside the DIFC.

The Law permits data transfer to pre-approved jurisdictions listed on the DIFC website; however, in the context of transfers to other jurisdictions, the Law provides companies with more options than the previous law and offers detailed guidance as to what constitutes adequate safeguards.

WHAT ARE THE FINES, LIABILITY AND SANCTIONS?

The Commissioner has the power to issue fines for contraventions of the Law by a Controller or Processor, in an amount they consider to be appropriate and proportionate.

The Law sets out the maximum fine of USD 100,000 for administrative breaches, with additional scope for larger fines for more serious violations.

The list of administrative fines under Schedule 2 of the Law are, as follows:

 

Contravention

Maximum Fine

(USD)

Failure to register with the Commissioner

USD 25,000

Failure to appoint a Data Protection Officer

USD 50,000

Failure to notify the Commissioner of an unauthorized data intrusion

USD 50,000

Failure to implement and maintain technical and organizational measures to protect personal data

USD 50,000

Failure to maintain records of any Personal Data Processing operations

USD 25,000

Failure to carry out a data protection impact assessment prior to High Risk Processing Activities

USD 20,000

The Commissioner can issue such fines from 1st October 2020 onwards. Further, the Law permits compensation claims to be made by or on behalf of data subjects.

NEXT STEPS?

Our aim is to assist businesses by providing guidance on data protection, and the impact of the new regulations on their business strategiesand models. We also advise employers that have not reviewed their employee policies, contracts, and data processing regimes to ensure these are up to date and in compliance with the Law.

If you require any assistance, please do not hesitate to contact us.

Robert Whitehead | Senior Associate

Hamdan Al Shamsi Lawyers & Legal Consultants

For any enquiry please click here

Author

Find the right Legal Expert for your business

The premier guide to leading legal professionals throughout the world

Specialism
Country
Practice Area
LAWYERS RECOGNIZED
0
EVALUATIONS OF LAWYERS BY THEIR PEERS
0 m+
PRACTICE AREAS
0
COUNTRIES AROUND THE WORLD
0

Join

who are already getting the benefits
0
Sign up for the latest legal briefings and news within Global Law Experts’ community, as well as a whole host of features, editorial and conference updates direct to your email inbox. Naturally you can unsubscribe at any time.

Online Casino Reviews

  • Freeroll Poker Tournaments For Real Money
  • Australian Online Casino Real Money
  • Best Slot App To Win Real Money
  • Online Casino Real Money Australia
  • Best Paying Online Pokies
  • Wizard Of Oz Online Slots
  • All Slots Casino Mobile
  • Best Online Poker App Real Money
  • Best Online Casino To Play Roulette
  • Is Online Casino Legal
  • Online Casino That Accepts Paypal
  • Play Roulette For Real Money
  • Slot Apps To Win Real Money
  • Real Money Slots Online Usa
  • Safe Online Casino
  • Wizard Of Oz Slots
  • Real Online Pokies Nz
  • Biggest Online Casino In The World
  • Online Casino Pay With Paypal
  • Online Casino That Accept Paypal
  • Online Casino Canada Real Money
  • 3 Card Poker Online Real Money
  • Online Slots Real Money Canada
  • Best Online Poker Sites For Real Money
  • Real Money Poker App Android Usa
  • How To Make Money From Online Casino Bonuses
  • Real Money Poker App Iphone
  • How To Play Blackjack Online For Real Money
  • Best Slots To Play
  • Top 10 Online Pokies
  • Best Poker Apps Real Money
  • Online Casino Legal
  • Best Payout Online Casino Uk
  • Win Money Online Slots
  • Online Poker Nj Real Money
  • How To Win Online Slots
  • Casino Gaming License
  • Play Real Pokies Online
  • Blackjack Sites For Real Money
  • Real Money Casino Games For Android
  • Best New Online Slots
  • Flaming 777 Slots Games
  • Online Blackjack With Live Dealers
  • How To Play Online Slots
  • Facebook Casino Games Real Money
  • Online Casino With No Minimum Deposit
  • How To Beat Online Slots
  • Online Casino License
  • The Big Payback Slots
  • Royal Vegas Online Casino Withdrawal
  • Online Casino Minimum Deposit 5
  • Online Pokies Real Money Australia
  • Las Vegas Usa Online Casino
  • Real Money Poker App Android
  • Wheel Of Fortune Slots
  • Game Of Thrones Slots
  • Online Poker Real Money Usa Legal
  • Best Online Casino European Roulette
  • Blackjack Online Real Money Paypal
  • Online Video Poker Real Money Usa
  • How To Create An Online Casino
  • Lucky Nugget Online Casino Mobile
  • How To Withdraw Money From Online Casino
  • Platinum Play Online Casino Download
  • Online Casino For Usa Players
  • Best Online Casino Usa Real Money
  • Online Roulette Real Money Usa
  • Best Real Money Poker Sites
  • Android Slots Real Money
  • How To Start An Online Casino Business
  • How To Start An Online Casino
  • How To Start An Online Gambling Site
  • Best Online Casino For Blackjack
  • Play Baccarat Online For Money
  • Online Pokies New Zealand
  • Best Slots To Play At Golden Nugget
  • Slots Of Vegas Online Casino
  • Best Online Pokies Site
  • How To Beat Online Roulette
  • New Zealand Online Pokies
  • Online Poker Mobile Real Money
  • Which Online Slots Payout The Most
  • Is Online Casino Legal In India
  • Online Casino Software For Sale
  • Best Online Casino For Craps
  • Hard Rock Casino Slots
  • Win Real Money Online Pokies
  • Online Casino With Highest Payout Percentage
  • Poker Apps With Real Money
  • Online Roulette Real Money Review
  • Full Tilt Poker Real Money
  • Online Casino 5 Dollar Minimum Deposit
  • Online Roulette With Real Money
  • Best Online Roulette For Real Money
  • I Migliori Casino Online Italiani
  • Best Payout Online Slots
  • How To Play Baccarat Online
  • Play Casino Card Game Online
  • Play Blackjack Online For Real Money
  • Best Paying Online Slots
  • Casino License Cost
  • Online Poker Real Money California
  • Safe Online Casino Australia
  • Online Roulette Australia Real Money
  • Online Poker Real Money Texas
  • Online Roulette Real Money Paypal
  • Online Slots Australia Real Money
  • Golden Nugget Online Casino Review
  • Casino Games To Win Real Money
  • Online Pokies Australia Real Money
  • Online Gambling Blackjack Real Money
  • Win Real Money Playing Slots
  • How To Win Roulette Online
  • Aristocrat Pokies Online Real Money
  • Hollywood Casino Online Slots
  • Play Online Keno For Real Money
  • What's The Best Online Casino
  • Triple Double Diamond Slots
  • Play Roulette Online With Real Money
  • Roulette Online For Real Money
  • Play Roulette Online Real Money
  • Best Online Pokies Real Money
  • Big Red Pokies Online
  • How To Win At Online Blackjack
  • What Is The Best Online Roulette Site
  • Real Money Online Pokies
  • Spin To Win Slots
  • Ruby Slots Online Casino
  • Wheel Of Fortune Online Casino
  • Spin Palace Flash Casino Online
  • Online Poker Real Money App
  • Online Casino With Paypal Deposit
  • How To Win At Online Roulette
  • Can You Win Real Money On Slot Apps
  • Is Ignition Casino Safe
  • Online Casino Blackjack Real Money
  • Online Casino Win Real Money Usa
  • How To Make Money Online Casino
  • Online Casino Real Money Reviews
  • Slot Games To Win Real Money
  • Jackpot City Online Casino Download
  • Online Pokies Real Money
  • Casino War Online Real Money
  • Online Casino No Minimum Deposit
  • Play Wheel Of Fortune Slots Online
  • Best Online Casino Game To Win Money
  • Online Casino Without Wagering Requirements
  • Online Slots For Real Money Usa
  • Legal Online Casino Australia
  • How Do Online Slots Work
  • Best Online Casino For Us Players
  • Online Play Casino Roulette Game
  • Online Blackjack Real Money Australia
  • Real Casino Games Real Money Online
  • Online Slot Machines Real Money Paypal
  • The Best Online Casino For Roulette
  • What Online Casino Pays Out The Most
  • Start Your Own Online Casino
  • Legal Online Casino
  • Online Live Roulette Casino Game
  • Playing Blackjack Online For Real Money
  • Online Penny Slots Real Money
  • Best Online Blackjack For Money
  • How To Win Online Roulette
  • Real Money Poker Sites Usa
  • Best Time To Play Slots
  • Online Keno For Real Money
  • Best Payout Online Slots Uk
  • Online Slots Real Money Reviews
  • Best Online Pokies Nz
  • What States Allow Online Gambling
  • Best Real Money Poker App
  • Online Slots To Win Real Money
  • Real Money Slots App Iphone
  • Jackpot City Flash Casino Online
  • Ignition Casino Legit
  • All Star Slots Casino
  • How To Play Online Casino
  • Real Time Gaming Slots
  • Online Video Poker Real Money
  • How To Play Roulette Online For Money
  • How To Win On Online Slots
  • Age Of Gods Slots
  • Online Real Casino Money Games
  • Best Online Slots To Play
  • Online Poker California Real Money
  • Is Jackpot City Casino Legit
  • How To Win At Online Slots
  • Play Poker For Real Money
  • Safe Online Pokies Australia
  • Best Way To Play Slots
  • How To Play Casino Online
  • Play Online Roulette For Money
  • Online Casino Australia Real Money
  • Which States Allow Online Gambling
  • Play Keno Online Real Money
  • How To Win Online Blackjack
  • Online Blackjack With Real Dealers
  • How To Open Online Casino
  • What Are The Best Online Slots To Play
  • Big Win Casino Slots
  • Spin Palace Online Casino Australia
  • Best Slots To Win On
  • Casino Slots Win Real Money
  • Slots Magic Online Casino
  • Blackjack Online For Real Money
  • Slot Machine App Win Real Money
  • Online Casino Not Paying Out
  • Slots That Pay Out Real Money
  • Online Pokies Australia Reviews
  • Online Casino Minimum Deposit 1
  • Jackpot City Online Casino Review
  • Live Dealer Baccarat Online Casino
  • Online Casino Apps For Android
  • Online Casino Paypal Deposit Australia
  • Online Casino With Live Dealer
  • How To Play Blackjack Online
  • Slots To Win Real Money
  • Wheel Of Fortune Online Slots
  • Play Quick Hit Slots Online
  • Can You Count Cards In Online Blackjack
  • Palace Of Chance Online Casino
  • How To Play Roulette Online
  • Good Slots To Play
  • Which Online Casino Pays Out The Most
  • Heart Of Vegas Casino Slots
  • Best Online Casino For Canadians
  • Australian Online Pokies Real Money
  • Mohegan Sun Online Casino Nj
  • Online Casino Live Games Best Uk
  • Best Online Casino Australia Reviews
  • Play Pokies Online Real Money
  • Best Online Casino For Usa Players
  • How To Win Online Casino
  • Play Blackjack For Real Money
  • Best Slots On Bovada
  • Online Keno Real Money Usa
  • Online Slots Real Money Paypal
  • Best Poker Sites For Real Money
  • Safe Casino Sites
  • The Best Online Slots
  • Play Keno For Real Money
  • Real Online Pokies Australia
  • Queen Of The Nile Slots
  • Mummys Gold Casino Online Casino
  • Play Keno Online For Real Money
  • Best Poker Websites Real Money
  • Lucky Nugget Online Casino Download
  • Best Online Casino For Roulette
  • Play Roulette For Money Online
  • Video Slots Mobile Casino
  • Best Time To Play Online Slots
  • Best Real Money Online Poker
  • Play Blackjack Online With Friends
  • Play Baccarat Online For Real Money
  • Is Silver Oak Casino Legit
  • Big Fish Casino Real Money
  • Can You Win Real Money On Caesars Slots
  • Game Of Thrones Slots Casino
  • Best Online Slots Payout Percentage
  • Play Online Pokies For Real Money
  • Play Pokies Online Australia
  • High 5 Casino Real Slots
  • The Best Online Pokies
  • Online Pokies That Accept Paypal
  • Heart Of Vegas Slots
  • How To Play Online Roulette
  • Best Poker App Real Money
  • Best Online Casino Fast Payout
  • Best Slots At Wind Creek Casino
  • Online Casino 10 Minimum Deposit
  • Play Roulette Online For Money
  • Us Real Money Poker Sites
  • How To Win In Online Casino
  • Best Online Pokies Australia Review
  • Where To Play Roulette Online For Real Money
  • How To Beat Online Casino Slot Machines
  • Highest Payout Online Slots
  • Best Paying Online Casino Slots
  • Golden Tiger Online Casino Review
  • Online Casino With Live Dealers
  • Play Roulette Online For Real Money
  • Best Slots To Play At Casino
  • Slot Machine Games Win Real Money
  • Most Popular Online Casino Games
  • Casino Slots App Real Money
  • Online Casino Real Money Canada
  • Online Real Money Pokies
  • Online Roulette Game Real Money
  • Online Casino Roulette Real Money
  • Best Place To Play Roulette Online
  • Online Casino Book Of Ra Paypal
  • Online Blackjack With Real Money
  • Play Online Blackjack For Real Money
  • Is There A Slot Machine App For Real Money
  • Royal Vegas Online Casino App
  • Best Casino Slots To Play
  • Most Popular Online Slots
  • Best Way To Win At Slots
  • Slots You Can Win Real Money
  • Play Roulette Online Real Money Usa
  • Online Casino Real Money Paypal
  • Online Casino Australia Legal
  • Treasures Of Troy Slots
  • Online Casino For Us Players
  • Where Can I Play Blackjack Online For Real Money
  • Online Casino Paypal Book Of Ra
  • Online Roulette For Real Money
  • Best Online Blackjack Real Money
  • Poker App For Real Money
  • Jackpot Magic Slots Facebook
  • Best Online Casino Real Money Usa
  • Best Online Casino New Zealand
  • The Four Kings Casino And Slots
  • How To Play Slots Online
  • Best Online Pokies Australia
  • Usa Online Slots Real Money
  • Real Money Casino Android App
  • Online Slot Machines That Pay Real Money
  • Online Pokies Real Money Nz
  • Online Pokies Real Money App
  • Play Igt Slots Online
  • Best Casino Slots To Win Money
  • Online Casino Business For Sale
  • Play N Go Slots
  • Poker Apps For Real Money
  • Lucky Slots Real Money
  • All Slots Online Casino
  • Best Online Pokies Real Money Australia
  • Online Pokies Win Real Money
  • Best Online Casinos For Roulette
  • Pay Slots For Real Money
  • Best Online Poker Real Money
  • Slots App Win Real Money
  • Play Online Roulette For Real Money
  • Is Ignition Casino Legit
  • Wheel Of Fortune Slots Online
  • Lotsa Slots Real Money
  • Video Poker Online Real Money
  • Online Slots Usa Real Money
  • Play Blackjack Online Real Money
  • Jackpot City Online Pokies
  • Video Slots Online Casino
  • Is 888 Casino Legit
  • Online Slot Games That Pay Real Money
  • Prepaid Visa Card Online Casino
  • How To Stop Online Gambling
  • Best Slots To Play Online
  • Online Blackjack For Real Money
  • Slot Apps For Real Money
  • Mobile Slots Win Real Money
  • Newsletter Sign Up

    About Us

    Global Law Experts is dedicated to providing exceptional legal services to clients around the world. With a vast network of highly skilled and experienced lawyers, we are committed to delivering innovative and tailored solutions to meet the diverse needs of our clients in various jurisdictions.

    Social Posts

    See More:

    Contact Us

    Stay Informed

    Join Mailing List

    GLE