Home / Knowledge Hub / Regulatory & Legal Updates
As the DIFC issues adequacy decision on CCPA, BSA TMT associate Hala Harb gives her comments to SME10X.
The decision facilitates personal data transfers between DIFC and California-based entities in accordance with the DP Law 2020, without having to apply additional contractual measures. It also sees DIFC setting a first-time precedent for building similar relationships with various US states.
The Commissioner of Data Protection of the Dubai International Financial Centre (DIFC), has issued a first-of-its-kind adequacy decision regarding the California Consumer Privacy Act of 2018, a standalone data protection law (CCPA). The CCPA was amended by the California Privacy Rights Act of 2020 (CPRA) which took effect on 1 January 2023 (together ‘Amended CCPA’). The decision establishes a determination of the Amended CCPA’s equivalence with the Data Protection Law, DIFC Law No. 5 of 2020 (DP Law 2020).
The decision, which is in line with DIFC’s commitment to drive privacy and data protection by continuously strengthening its knowledge of cross-border enforcement best practices, facilitates personal data transfers between DIFC and California-based entities in accordance with the DP Law 2020, without having to apply additional contractual measures. It also sees DIFC setting a first-time precedent for building similar relationships with various US states.
The DIFC Commissioner’s Office recognises the Amended CCPA and the California Privacy Protection Agency (CPPA) as an international organisation ensuring adequate data protection for purposes of personal data processed and transferred by the entities that it supervises.
Jacques Visser, DIFC Commissioner of Data Protection, commented, “The importance of additional safeguards for imported personal data is evidenced by the factors set out in published adequacy protocols as well as the DIFC Ethical Data Management Risk Index (EDMRI) and due diligence tool. In evaluating California’s privacy law and regulations, together with implementation, enforcement and other holistic factors, it became clear that in large part, California importers will treat personal data from DIFC ethically and fairly.”
The Amended CCPA gives consumers control and protection over personal data collected by businesses with built-in methods for confining data collection and processing to what is fair and lawful, and necessary, in adherence with global data protection standards as well as the Commissioner’s objectives in administering the DP Law 2020.
Hala Harb, associate at BSA Ahmad Bin Hezeem & Associates added that “the adequacy decision will significantly facilitate the transfer of personal data to the US, which will enhance cooperation and collaboration between different entities of the same group, allow businesses to easily store data on cloud servers located in the US and therefore considerably reduce cost. We believe this adequacy decision will undoubtedly attract the incorporation in the DIFC of further US businesses, notably tech companies offering digital services and products.”
The adequacy decision issued by the DIFC Commissioner comes following the amendments introduced to the California Consumer Privacy Act (CCPA). These CCPA amendments included additional privacy protections to consumers, bringing the CCPA closer to global privacy standards.
The original article can be read here: SME10X - DIFC issues adequacy decision on CCPA.
This article was written by TMT lawyer Hala Harb and focuses on personal data transfers.
BSA is a regional Law Firm in the Middle East with offices in the UAE, Oman and Saudi Arabia. As a full-service law firm our practice areas include litigation, arbitration and corporate services, including M&A, banking & finance, Intellectual Property, TMT, Fintech, employment and insurance.
Published on 15 August, 2023.
Law requires secure storage of healthcare data in UAE for...
In the modern era, new technological designs and innovations have...
AI is playing a crucial role in this transformation, driving...
A routine software update by cybersecurity giant CrowdStrike recently triggered...
The UAE legislator was among the first in the region...
TMT and Fintech partner, Nadim Bardawil, recently spoke to Arabian Business...
Corporate lawyers Michael Kortbawi and Mahmoud Kreidie recently spoke with...
BSA TMT and FinTech partner Nadim Bardawil recently spoke with...
The Saudi Central Bank (SAMA) has issued a decisive set...
In the UAE, borrowers who obtain financing from banks or licensed financial institutions or guarantors in rem may grant the...
On 26 September 2022, the UAE legislator issued Federal Decree-Law No. 23 of 2022, amending certain provisions of Federal Decree-Law...
Saudi Arabia's recent amendments to its Labor Law signify a substantial shift in the regulatory landscape, presenting both challenges and...
Real estate broker’s register in the Emirate of Dubai is regulated by regulation No. 85/2006. Article 26 of said regulation...
Under Article 104 of the Interim Constitution of the United Arab Emirates (“UAE”), each emirate maintains its own independent judicial...
When a judgment is handed down ordering a debtor to pay compensation, it is possible for the creditor to submit...
On Thursday 23rd May, BSA proudly entered into a Strategic Partnership Agreement with Meydan Free Zone, the first law firm...
The Emirate of Dubai is currently experiencing a period of unprecedented economic growth and prosperity. There is much interest from...
Legislative strides catapult the UAE to the vanguard of progressive economies in the Middle East.
BSA Law, a leading regional law firm headquartered in the UAE, hosted a prestigious event at their DIFC offices in...