DIFC updates Data Protection & related laws
what is it about
On 16 July 2025, DIFC enacted amendments (effective 15 July) that, among other updates, introduce a private right of action for data subjects in the DIFC Courts. The changes clarify extra-territorial scope and update Article 28 on data-sharing adequacy assessments for third countries. DIFC also made clarificatory tweaks to the Law of Security, Insolvency Law and Employment Law. These updates continue DIFC’s trend of aligning with international best practice and giving clearer enforcement pathways. Firms processing personal data from a DIFC base should revisit governance, DPA templates, and redress mechanisms.
How we can help
Run a gap-analysis on your data flows and refresh your policies, notices, and transfer impact assessments.