UAE checklist

UAE Personal Data Protection Law (PDPL) Compliance Checklist

Based on Federal Decree by Law No. (45) of 2021 on the Protection of Personal Data. Covers processing, security, accountability, and cross-border transfer requirements.

This checklist gives you the information. The judgment on what it means for you is still yours. You'll need to enter your email at the end to see your score.

Before you start — does this apply to you?

Does the entity operate within the State, or does the entity, though residing outside the State, carry out processing activities involving Personal Data of Data Subjects inside the State?

Does the processing involve Government Data, data held by security/judicial authorities, specific health data, specific banking/credit data, or data processed by establishments within free zones with separate legislation?

Answer the questions above to continue.

This toolkit is provided for informational and educational purposes only and does not constitute legal advice. It is designed to help you identify potential compliance gaps and organise your approach to data protection requirements. Using this tool does not guarantee compliance with UAE PDPL. Each organisation's compliance needs are unique and depend on your specific circumstances, jurisdiction, data processing activities, and risk profile. We strongly recommend: engaging qualified legal counsel for compliance advice, conducting a formal compliance audit by qualified professionals, tailoring these templates to your specific context, and regularly reviewing and updating your compliance program. Acuity Data and its affiliates accept no liability for any compliance gaps, regulatory penalties, or damages arising from use of this toolkit.