DUBAI – Dubai International Financial Centre (DIFC) has enacted amendments to select legislation through DIFC Laws Amendment Law, Law No. 1 of 2005.
This includes amendments to the Data Protection Law to provide additional protections and rights of action for Data Subjects in the DIFC. In addition, legislative amendments provide clarification to ensure DIFC Laws remain in line with international best practices.
DIFC has made amendments to the Data Protection Law to introduce a private right of action through the DIFC courts, enhancing the rights and remedies available to data subjects whose personal data has been processed in contravention of the Data Protection Law.
Additional clarificatory amendments have been made, which include amendments to the scope of application and extra-territorial scope of the Data Protection Law; and an update to Article 28 on Data Sharing to clarify the adequacy referential for assessing the suitability of third countries for receiving Personal Data.
Certain clarificatory amendments have also been enacted in respect of the Law of Security, Insolvency Law and Employment.
The Amendment Law were enacted on 8th July 2025 and came into effect on 15th July 2025.
