Home / Knowledge Hub / News
UAE: Proposed data protection amendments “seek to close loopholes”
Click here to view the article online.
The Abu Dhabi Global Market (‘ADGM’) launched, on 4 May 2017, a consultation on the Data Protection (Amendment) Regulations 2017 (‘the Proposed Amendments’), which would amend the Data Protection Regulations 2015 (‘the Regulations’). The Proposed Amendments would introduce significant changes to the capabilities of the ADGM Registration Authority (‘the Registrar’), including broader enforcement powers to ensure compliance with the Regulations.
Hadeel Mohamed, Associate at BSA Ahmad Bin Hezeem & Associates LLP, told DataGuidance, “Since the need for providing security is as old as the history of mankind, the Proposed Amendments aim to increase the authority of the Registrar by granting him the right to designate the jurisdictions [that provide an adequate level of protection and] to which personal data can be transferred, or to withdraw such a designation […] The enforcement [provisions introduced by] the Proposed Amendments are important for preventing business losses from a security incident. It is necessary to ensure that no loopholes may be found [by incorporating a high standard] of protection of personal data.”
In addition, the Proposed Amendments contain a grandfathering clause which provides that a legally binding agreement containing model data transfer clauses, concludedbefore the Proposed Amendments enter into force, will remain effective.
Moreover, theProposed Amendments include expanding the definition of personal data to also include the relevant filing system, as well as expanding the notion of sensitive personal data to cover criminal records. Additionally, it imposes a time limit of one month to notify the Registrar of the intention to renew registration, any change to the details of the controller or processor, and the appointment of a data processor.
Bin Daher explained, “Since the Regulations took effect in 2015, the Registrar has kept itself abreast of international developments and revolving needs in this area and [has] identified aspects of the legislation to update for improved clarity and effectiveness […] The current framework enables the Registrar to issue a direction in the event of a contravention of the Regulations. As part of the Proposed Amendments, the Registrar will be able to issue a fine not only for failure to follow a direction but in respect of a contravention itself. [This will] provide improved flexibility of approach and effectiveness in the ADGM’s enforcement of the data protection regime.”
After the consultation period closes on 30 May 2017, all comments will be reviewed and the ADGM will consider if any modifications to the Proposed Amendments are needed. The final Data Protection (Amendment) Regulations 2017 will be submitted to the the ADGM Board of Directors for approval.
The Abu Dhabi Global Market (‘ADGM’) launched, on 4 May 2017, a consultation on the Data Protection (Amendment) Regulations 2017 (‘the Proposed Amendments’), which would amend the Data Protection Regulations 2015 (‘the Regulations’). The Proposed Amendments would introduce significant changes to the capabilities of the ADGM Registration Authority (‘the Registrar’), including broader enforcement powers to ensure compliance with the Regulations.
Hadeel Mohamed, Associate at BSA Ahmad Bin Hezeem & Associates LLP, told DataGuidance, “Since the need for providing security is as old as the history of mankind, the Proposed Amendments aim to increase the authority of the Registrar by granting him the right to designate the jurisdictions [that provide an adequate level of protection and] to which personal data can be transferred, or to withdraw such a designation […] The enforcement [provisions introduced by] the Proposed Amendments are important for preventing business losses from a security incident. It is necessary to ensure that no loopholes may be found [by incorporating a high standard] of protection of personal data.”
In addition, the Proposed Amendments contain a grandfathering clause which provides that a legally binding agreement containing model data transfer clauses, concludedbefore the Proposed Amendments enter into force, will remain effective.
Daher Bin Daher, CEO of the Registrar, stated, “Regarding the designation of jurisdictions with an adequate level of protection, [the Proposed Amendments] relate to [the criteria] by which jurisdictions are designated, and will have a negligible impact on cross-border data transfers.”Since the Regulations took effect in 2015, the Registrar has kept itself abreast of international developments […] and [has] identified aspects of the legislation to update for improved clarity and effectiveness
Moreover, theProposed Amendments include expanding the definition of personal data to also include the relevant filing system, as well as expanding the notion of sensitive personal data to cover criminal records. Additionally, it imposes a time limit of one month to notify the Registrar of the intention to renew registration, any change to the details of the controller or processor, and the appointment of a data processor.
Bin Daher explained, “Since the Regulations took effect in 2015, the Registrar has kept itself abreast of international developments and revolving needs in this area and [has] identified aspects of the legislation to update for improved clarity and effectiveness […] The current framework enables the Registrar to issue a direction in the event of a contravention of the Regulations. As part of the Proposed Amendments, the Registrar will be able to issue a fine not only for failure to follow a direction but in respect of a contravention itself. [This will] provide improved flexibility of approach and effectiveness in the ADGM’s enforcement of the data protection regime.”
After the consultation period closes on 30 May 2017, all comments will be reviewed and the ADGM will consider if any modifications to the Proposed Amendments are needed. The final Data Protection (Amendment) Regulations 2017 will be submitted to the the ADGM Board of Directors for approval.
| Published: | May 2017 |
| Title: | UAE: Proposed data protection amendments “seek to close loopholes” |
| Publication: | DataGuidance |
| Authors: | Hadeel Mohamed |
Related Insights
DIFC Issues First-of-its-Kind Adequacy Decision on The California Consumer Privacy Act
As the DIFC issues adequacy decision on CCPA, BSA TMT...
Implications of Artificial Intelligence for the Health Insurance Sector
The United Arab Emirates (UAE) is one of the fastest...
Changes to Personal Data Protection Law in Saudi Arabia – Implications for the Healthcare Sector
In this article, we look at some of the forthcoming...
Dubai’s new virtual assets law will lead to increased investments by firms already in the crypto industry
Dubai’s new virtual assets regulatory law – and the corresponding...
Mind the Data Protection Gap: Oman's new Data Protection Law
What’s happened and why? Oman has recently promulgated the Personal...
Data Protection in Oman: An enhanced framework
Post pandemic where the world has become more digital, the...
White paper: Cybersecurity for SMEs in a Post-Covid era
Cybersecurity for SMEs in a Post-Covid era In a post-Covid...
Precautions to consider prior to investing in a UAE business
There are a number of precautions that ought to be...
BSA partners with NOW-Fertility
BSA is pleased to announce a new partnership with NOW-fertility, a global IVF service setting a new benchmark for fertility...
The Impact of Circular No. 8 of 2023: Translation Requirements for Documents in Abu Dhabi Courts
The Constitution of the United Arab Emirates, as enshrined in Article 7, designates Arabic as the official language of the...
TikTok lures Gen Z with personal finance advice, but what are the risks
Antoine Iskandar recently spoke with Arabian Business answering the following questions regarding the use of TikTok for personal finance advice. What...
Embracing the New Tax Era in the UAE: How CIT is Reshaping M&A Strategies
The introduction of the Corporate Income Tax (CIT) in the UAE is not just a new tax policy; it's a...
DIFC Issues First-of-its-Kind Adequacy Decision on The California Consumer Privacy Act
As the DIFC issues adequacy decision on CCPA, BSA TMT associate Hala Harb gives her comments to SME10X.The decision facilitates personal...
UAE Corporate Tax: New Tax Procedure Law
The Ministry of Finance recently announced Cabinet Decision No 74 of 2023 (the Cabinet Decision) on the Executive Procedure of...
Artificial Intelligence in Life Sciences - a UAE perspective
Artificial intelligence (AI) is a transformative technology that is changing the world as we know it. From healthcare to the...
Implications of Artificial Intelligence for the Health Insurance Sector
The United Arab Emirates (UAE) is one of the fastest growing economies in the world, and healthcare is one of...
Egg freezing in the UAE: Law reforms and changing attitudes
Human egg freezing (mature oocyte cryopreservation) is a medical procedure that has become increasingly popular worldwide over recent years. Individuals...
Generative AI has an intellectual property problem, here's why
Munir Suboh and Felicity Hammond of the BSA Intellectual Property team recently spoke with Arabian Business regarding artificial intelligence (AI), answering...