Data Protection

data-protection legal skills for United Arab Emirates

The UAE now operates a layered data protection landscape: the Federal Decree-Law No. 45 of 2021 on Personal Data Protection sits alongside the distinct regimes governing the Dubai International Financial Centre and Abu Dhabi Global Market free zones, each with its own authority and rulebook, meaning a single data transfer or processing arrangement may engage multiple frameworks simultaneously. Practitioners advising clients established onshore, in the DIFC, or in the ADGM must navigate these parallel regimes, and the divergence between them — in consent requirements, data subject rights, and cross-border transfer mechanisms — is where the most consequential advice lives. The UAE data protection legal skills in the ThomasMore catalog are built for precisely that multi-regime reality, covering gap analyses, privacy notice drafting, data processing agreement review, and breach notification workflows across all three frameworks.

Each skill is agent-ready, executable over MCP or downloadable into your existing tools, so repetitive compliance tasks — mapping processing activities against the federal law, screening a vendor contract against DIFC Data Protection Law requirements, or building a records-of-processing inventory — run consistently and at scale. The ThomasMore catalog lets you filter by license, author, or specific framework, making it straightforward to find capabilities tuned to onshore federal obligations versus free-zone rules. As the UAE's data protection regulatory environment continues to mature through implementing regulations and guidance from the competent authorities, open-source contributions to this collection are maintained accordingly. If your work touches a specific sector — financial services, health data, or cross-border transfers to jurisdictions without an adequacy finding — use the filters above to surface the skills most relevant to that exposure.