Continue reading on DataGuidance with:
Free Member
Limited ArticlesCreate an account to continue accessing select articles, resources, and guidance notes.
Already have an account? Log in
DIFC: DIFC publishes thematic report on government data sharing requests
The Dubai International Financial Centre (DIFC) published, on July 4, 2023, its Thematic Assessment Report No. 1 of 2023 regarding the implementation of Article 28 of DIFC Data Protection Law No. 5 of 2020 (the Law). In this regard, the report aims to clarify concerns around the following:
- receipt of government data sharing requests;
- basic implementation of Article 28 of the Law;
- origination, types of, and reasons for government authority data sharing requests made to DIFC-based entities; and
- controller and processor obligations, as well as processing categories of personal data.
In this regard, Article 28 of the Law sets out the controls and measures for controllers and processors to follow up on receiving a request from a public body for disclosure or transfer of personal data.
Notably, the Director of the DIFC Commissioner's Office, Lori Baker, noted that "The findings may be of interest in the context of our own 'Data Bridge' assessment by the UK, and generally to help understand the scope of [Article 28] regarding government collection of data and data sharing."
You can read the report here and the Director's remarks here.