UAE — DIFC (Dubai) — data protection and AI governance
DIFC Data Protection Law No. 5 of 2020 (DIFC DP Law No. 5/2020), in force since 2020-07-01. Supervisory authority: DIFC Commissioner of Data Protection.
Data protection
- Instrument
- DIFC Data Protection Law No. 5 of 2020 (DIFC DP Law No. 5/2020)
- In force since
- 2020-07-01
- Authority
- DIFC Commissioner of Data Protection
- Penalties
- Jusqu'à 100 000 USD + amendes discrétionnaires
- Key obligations
- Aligné RGPD
- DPO certains cas
- Notification 72h
- Transferts encadrés
- Source
- https://www.difc.ae/
What the engine decides here
Indicative coverage
This jurisdiction's legal attributes are not modelled yet: no decision is staked on it. The engine flags the uncertainty in its response rather than assuming a permissive regime — not knowing is an answer, guessing is not.
Three decisions, computed just now
Same actions, this jurisdiction's context. These answers come out of the engine as the page renders — the same function the API calls.
- ALLOW
Read an internal contract
Low-risk operation
- ALLOW
Send a customer record to US_FED
Low-risk operation
- DENY
Decide on a job application
Decision reserved for a human
Advisory decisions. StructureClerk decides; your infrastructure enforces.
Do your agents operate in UAE — DIFC (Dubai)?
The authority API makes these attributes executable: an ALLOW, APPROVE, DENY or ESCALATE decision before the agent acts, with signed evidence any third party can verify.