Federal data law: the UAE PDPL
Onshore, personal data falls under Federal Decree-Law No. 45 of 2021, in force since 2 January 2022. Its executive regulations had not been published by late 2026, so we build to the law’s own principles: a clear purpose for every field the agent collects, data kept no longer than needed, and a person’s right to object to decisions made only by automated processing.
Source: Simmons & Simmons: UAE PDPL FAQs