The United Arab Emirates (UAE) has issued its first standalone legislation to regulate the collection and processing of personal data in the country. The Law is in effect from 2 January 2022, although organisations will have a period of six months from the date of issuing of the executive regulations (expected by March 2022) to adjust their status and comply with the Law.

The Federal Decree-Law no. 45 of 2021 regarding personal data protection (the Law) was issued on 27 November 2021 along with several other significant legislative changes introduced as part of an unprecedented legal reform programme for the UAE’s Golden Jubilee.