On the first of June 2020, a new DIFC data protection legislation has been introduced. 

This new legislation replaces the former Data Protection Law No.1 of 2007 and all relation Regulations. The DIFC Law will be applicable from 1 July 2020.  

The delay, for registered business to comply with it, is until 1 October 2020. 

What can the DPO do?

Firstly, the role of the DPO includes monitoring an organisation’s compliance with the law as well as any other data protection or privacy related laws or regulations to which the organisation is subject within DIFC. 

It is also responsible of providing support to ensure that the relevant policies and procedures are adhered to. This also includes the educating, informing and providing council to organisations and its employees who carry out processing of its obligations. 

This counseling service would be on issues relating to data protection impact assessment, how to comply with the necessary requirements. In addition to advising on personal data breaches, the DPO cooperates with the data protection authorities and acts as a point of contact incase of further queries. 

Source: “The rise of Data Protection Officers (DPO) in the Dubai Financial Centre (DIFC)”, Bird & Bird, 6/20