Enhanced DIFC Data Protection Law Comes into effect

Dubai International Financial Centre (DIFC), the leading international financial hub in the Middle East, Africa and South Asia (MEASA) region will implement the new Data Protection Law No. 5 of 2020 from 1 July 2020. The law places Dubai and DIFC at the forefront of data protection in the region, enabling the financial hub to enhance the Centre’s data protection practices related to global data, security and privacy best practice.

The new Data Protection Law replaces Data Protection Law DIFC Law No. 1 of 2007, which was already one of the most advanced in the region.

While the new Data Protection Law will be effective from 1 July 2020, businesses to which the law applies will have a grace period of three months, until 1 October 2020, to prepare to comply with it, after which it becomes enforceable. Details of the DIFC Data Protection Law have been published on their website.