DIFC Amends Data Law to Strengthen Rights and Protections

Photo: Dubai Government Media Office 

The Dubai International Financial Centre (DIFC), one of the most important financial hubs in the Middle East, Africa, and South Asia (MEASA), has made some big changes to its laws. These changes were officially passed on July 8, 2025, and came into effect on July 15, 2025. The updates focus on the Data Protection Law but also touch on other important areas like employment, insolvency, and security.

Stay informed with the latest news. Follow DXB News Network on WhatsApp Channel 

What Is DIFC?

Before we dive into the changes, let’s understand what DIFC is. DIFC stands for Dubai International Financial Centre. It’s like a small city inside Dubai where international banks, insurance companies, investment firms, and law firms do business. It has its own set of laws and courts, which are separate from the rest of the UAE.

Because so many international businesses work from DIFC, it’s important that its rules are very clear, fair, and follow global standards. That way, people and companies feel safe and protected when working there.

Why Were the Laws Changed?

Over time, as technology grows and new challenges appear, laws need to be updated. That’s exactly what DIFC did. They reviewed some of their laws to make sure they still match the best practices used around the world. The updates also help protect people’s personal data better and give them more power if their data is misused.

Big Changes to the Data Protection Law

The biggest update is to the Data Protection Law. This law is all about how companies in DIFC should collect, use, store, and protect personal information (also called “personal data”). This could be your name, phone number, email, or anything else that identifies you.

Here’s what’s new:

1. You Can Now Take Legal Action

One of the most important changes is that people whose personal data is used wrongly can now take the matter to court. This is called a “Private Right of Action.”

For example, if a company shares your personal details with someone without your permission, you now have the right to file a case in the DIFC Courts. This means the courts can decide whether the company broke the law and, if yes, what should be done about it. This gives people more power and control over their own information.

2. Clearer Rules on Who the Law Applies To

Sometimes, it can be confusing whether a law applies only to people and companies inside DIFC or also to those outside of it. The new changes now make it very clear. Even if a company is located outside of DIFC, if it handles the data of someone who lives or works in DIFC, the law still applies to them.

This is important in today’s digital world because a lot of companies use cloud services or outsource work to firms in other countries. With this change, people’s data stays protected no matter where the company is based.

3. Better Rules for Sending Data Abroad

Many businesses in DIFC send personal data to companies or offices in other countries. But not every country has strong privacy laws. That’s why the updated Article 28 in the law talks about something called “adequacy.”

This means the law now gives better guidelines for checking if another country has good enough rules to protect personal data. If the country’s rules are not strong enough, extra steps need to be taken to keep the data safe.

So now, before a company in DIFC sends your personal information to another country, they need to be sure that it’s going to be treated with care and protection.

Other Legal Changes Outside of Data Protection

Besides data privacy, DIFC also made small but important updates to other laws. These include:

1. Law of Security

This law is about using property or other valuable items as a guarantee when borrowing money. The changes help make the rules easier to understand and follow for both lenders and borrowers.

2. Insolvency Law

This law comes into play when a company can no longer pay its debts. The changes provide more clarity on how such situations should be handled, ensuring that both creditors and companies are treated fairly.

3. Employment Law

DIFC also made some small changes to its employment rules. These changes help make sure that both employers and employees clearly understand their rights and responsibilities in the workplace.

These updates are not major overhauls but clarifications. In simple words, they are like fixing typos or rewriting a sentence to make it easier to understand.

Why This Matters to You

Even if you don’t work in DIFC, these changes are still important. Here's why:

• Stronger privacy rights: You have more power over your personal information.

• Transparency: The rules are clearer, so it’s easier for everyone to understand what is allowed and what’s not.

• Global standards: DIFC is showing that it wants to stay in line with international laws, which helps build trust.

If you are a business owner in DIFC, you should review these new rules carefully. Make sure your company’s privacy policies and employment contracts match the updated laws. If you're an employee, you now have clearer rights and better protections, especially when it comes to how your personal information is used.

When Did These Changes Start?

The changes were officially passed on 8 July 2025 and became law on 15 July 2025. That means all companies working in DIFC now need to follow these new rules from that date.

Where to Find the Full Law?

If you want to read the full version of the updated laws, you can visit DIFC’s legal database online. It includes the full text of the DIFC Laws Amendment Law, Law No. 1 of 2005 and all the changes made to the other related laws.

These updates are a big step forward for DIFC. They make sure that people’s privacy is respected, that companies act responsibly, and that everyone knows what the rules are. By giving more rights to people and keeping the laws up-to-date, DIFC is working to stay ahead in the fast-changing world of technology and global business.

Whether you’re a lawyer, a businessperson, or just a curious reader, these changes show how serious DIFC is about protecting people’s rights and keeping things fair and transparent.