Become a Member

Regulation TrackerLaws, orders and treaties read for their security duties and clocks Standards & FrameworksAttack taxonomies, control catalogues and frontier frameworks AI Incident DatabaseThe security incident record, with mechanism and lesson Research Paper LibraryThe papers that define the field, summarised OSS DirectoryRed teaming, guardrail, supply chain and evaluation tools Case StudiesProgrammes built, with measured outcomes AI Vulnerability TrackerCVEs and advisories for the components AI systems are built from

Latest in the tracker

New York Stop Addictive Feeds Exploitation (SAFE) for Kids Act and implementing rulesNew York's law restricting algorithmic feeds for minors takes effect on 25 January 2027 under final rules published in July 2026, with certified age assurance and $5,000-per-violation penalties.

Knowledge Base Regulation Tracker Standards & Frameworks OSS Directory AI Incident Database Research Paper Library Case Studies Society Articles News Jobs About Charter Become a Member

Home/Regulation Tracker/UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data

UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data

The UAE's federal privacy law recognises a right against solely automated decisions but still awaits executive regulations; AI governance otherwise rests on the UAE AI Charter and free-zone rules such as DIFC Regulation 10 on autonomous systems.

uaepdplautomated decisions

Required actions

Article 17: individuals may object to decisions based solely on automated processing with legal or serious consequences and request human review - Appoint a DPO for large-scale processing of sensitive data or systematic monitoring; conduct impact assessments

Contribute

Spot an error, or know a record we should add? Members can propose additions and submit corrections.

Add regulation Report a correction or request removal