Support Centre

You have out of 5 free articles left for the month

Signup for a trial to access unlimited content.

Start Trial

Continue reading on DataGuidance with:

Free Member

Limited Articles

Create an account to continue accessing select articles, resources, and guidance notes.

Free Trial

Unlimited Access

Start your free trial to access unlimited articles, resources, guidance notes, and workspaces.

DIFC: DIFC publishes thematic report on government data sharing requests

The Dubai International Financial Centre (DIFC) published, on July 4, 2023, its Thematic Assessment Report No. 1 of 2023 regarding the implementation of Article 28 of DIFC Data Protection Law No. 5 of 2020 (the Law). In this regard, the report aims to clarify concerns around the following:

  • receipt of government data sharing requests;
  • basic implementation of Article 28 of the Law;
  • origination, types of, and reasons for government authority data sharing requests made to DIFC-based entities; and
  • controller and processor obligations, as well as processing categories of personal data.

In this regard, Article 28 of the Law sets out the controls and measures for controllers and processors to follow up on receiving a request from a public body for disclosure or transfer of personal data.

Notably, the Director of the DIFC Commissioner's Office, Lori Baker, noted that "The findings may be of interest in the context of our own 'Data Bridge' assessment by the UK, and generally to help understand the scope of [Article 28] regarding government collection of data and data sharing."

You can read the report here and the Director's remarks here.

Feedback