Latham lawyers explain who the DIFC’s new law applies to and how it maps against the GDPR.
By Brian A. Meenagh, Fiona M. Maclean, Alexander Hendry, and Avinash Balendran
The Dubai International Financial Centre (DIFC) recently issued a new data protection law and regulations: the Data Protection Law DIFC Law No. 5 of 2020 and the Data Protection Regulations (together, the DIFC DP Legislation). The new law, which became effective on 1 July 2020, sets a significant benchmark for data privacy in the Middle East and aligns the DIFC’s data protection framework with international data protection regulations, including the EU’s General Data Protection Regulation (GDPR).
In January 2019, the Commissioner for Data Protection for the Dubai International Financial Centre (DIFC) issued new