There could still be delays due to operational challenges at Dubai International Airport after Tuesday's heavy rains
The new law will come into effect from July 1, 2020. The current law, Data Protection Law DIFC Law No. 1 of 2007, will remain in effect until this date. The Data Protection Law further develops the current DIFC Data Protection regime which was already one of the most advanced in the region.
The Board of Directors of the DIFC Authority has also issued new Data Protection Regulations that set out the procedures for notifications to the Commissioner of Data Protection, accountability, record keeping, fines and adequate jurisdictions for cross-border transfers of personal data.
DIFC's updated Data Protection Law and Regulations set out expectations for Controllers and Processors in the Centre regarding several key privacy and security principles. The Data Protection Law combines the best practices from a variety of current, world class data protection laws, such as the General Data Protection Regulation (GDPR), the California Consumer Privacy Act and other forward-thinking, technology agnostic concepts.
The requirements reflect the DIFC's commitment to developing an enabling business ecosystem with robust regulatory and compliance guidelines for all organisations operating from the Centre. They will enable DIFC to continue to build upon the Centre's reputation as a leading global financial centre focused on innovation and collaboration, whilst also promoting ethical data sharing. Importantly, the Data Protection Law and Regulations provide a framework that will support DIFC's bid for adequacy recognition by the European Commission, the United Kingdom and other jurisdictions, easing data transfer compliance requirements for DIFC businesses.
In more detail, the changes legislate for accountability of Controllers and Processors through compliance programmes requirements, appointing data protection officers where necessary, conducting data protection impact assessments and imposing contractual obligations that protect individuals and their personal data. Enhanced rights of individuals are clarified in terms of data usage by entities that collect and manage personal data, including contractual clarity of such rights when engaging with vendors of emerging technologies, such as Blockchain and Artificial Intelligence (AI). Permit options for cross-border data transfers and special category personal data processing have been removed. The Data Protection Law and Regulations include appropriate data sharing structures between government authorities, which represent a key step forward in data sharing standards within the UAE and the region.
General fines for serious breaches of the Data Protection Law, in addition to or instead of administrative fines, as well as increased maximum fine limits, have been introduced.
Essa Kazim, Governor of DIFC, said: "DIFC continues to develop its robust regulatory ecosystem built on the principles of compliance, integrity and security. The enhanced Data Protection Law combines the best practices from world-class data protection laws. By setting out the regulation, DIFC also sets a clear requirement for all organisations to follow global best practice relating to data and privacy. It demonstrates our position as a forward thinking international financial hub shaping the future of finance across the region and enables us to further consolidate the Centre's reputation as a leading global financial centre."
In light of the current global pandemic, while the Data Protection Law will be effective from 1 July 2020, businesses to which it applies will have a grace period of three months, until 1 October 2020, to prepare to comply with it, after which it becomes enforceable.
There could still be delays due to operational challenges at Dubai International Airport after Tuesday's heavy rains
World’s busiest international airport is working hard to mitigate the impact of the adverse weather for normal operations within 24 hours
Flight arrivals for some airlines have resumed on Dubai airport's Terminal 1
This programme is part of MANTRA's effort to contribute to the Real World Asset (RWA) tokenisation sector, with a focus on the MENA region
Experts highlight that very few students excel in courses spanning 2 years by studying for just two to three months, a sustained approach is critical
Chance of fog or mist formation over some coastal and internal areas
Panic and fear gripped many motorists as the water level surged, and they had to make a choice- to prioritise their safety or cling to their cars
The trend is seeing professionals in their 20s take positions as directors and vice-presidents of companies — but does it put careers at risk?