Dubai International Financial Centre (DIFC) has introduced significant amendments through the DIFC Laws Amendment Law, Law No. 1 of 2005, aimed at enhancing the legal framework within the Centre.
A major focus of these amendments is the Data Protection Law, which now offers expanded protections and introduces a private right of action for Data Subjects within the DIFC. This provides individuals with enhanced legal recourse if their personal data is processed in violation of the Data Protection Law. Additionally, the amendments clarify the scope of application and extra-territorial reach of the law, ensuring that DIFC regulations remain aligned with international best practices.
A key update to the Data Protection Law involves modifications to Article 28, which addresses Data Sharing. This update clarifies the criteria for assessing the adequacy of third countries in receiving personal data, ensuring that transfers meet the Centre’s stringent data protection standards.
In addition to the Data Protection Law, DIFC has made important clarifications in several other areas, including the Law of Security, Insolvency Law, and Employment Law, further strengthening the Centre’s legal infrastructure.
The amendments were enacted on July 8, 2025, and came into effect on July 15, 2025, marking a critical step in ensuring that the DIFC remains a global leader in financial regulation and data protection.
–Input WAM
