Law: Data Protection Regulations 2021

Regulator: The ADGM Registration Authority, the Board of Directors of the ADGM, and the Office of Data Protection (ODP)

Summary: The Abu Dhabi Global Market (ADGM) is a financial free zone within the UAE, which itself is a federation composed of seven emirates. Being a financial free zone means that UAE federal, civil, and commercial law does not apply, and the ADGM can create its own legal and regulatory framework for all civil and commercial matters.

In the ADGM, the Data Protection Regulations 2021 (the 2021 Regulations), enacted on February 14, 2021, govern the processing of personal data by persons operating in the free zone. For new entities established on or after February 14, 1, the 2021 Regulations entered into effect six months after publication on August 14, 2021. For existing entities, the 2021 Regulations entered into effect 12 months after publication, i.e., February 14, 2022.

The aim of the 2021 Regulations is to bring the ADGM data protection regime in line with international standards like the EU's GDPR. In particular, the 2021 Regulations provide for legal bases for processing data, data subject rights, penalties, and controller and processor obligations, including carrying out Data Protection Impact Assessments (DPIAs) and appointing a data protection officer (DPO).