GovernmentUnited Arab Emirates
Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (UAE PDPL)
What is Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (UAE PDPL)?
Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the UAE PDPL) is the UAE's federal-level personal data protection law adopted on 26 September 2021 + published in the Official Gazette on 28 November 2021 + entered into force on 2 January 2022 (six months after publication). It comprises 12 controls organised across 7 domains, and applies in the United Arab Emirates.
How Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (UAE PDPL) maps to other frameworks
All 12 controls, each one mapped to the equivalent requirement in other standards, with the evidence that carries across and the mappings that were judged and rejected shown alongside. No account needed to look.
See the control mappings →The 7 domains Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (UAE PDPL) groups its controls into
UAE PDPL: Scope, Definitions and Applicability (Articles 1-3)
UAE PDPL: Data Subject Rights (Articles 11-16)
UAE PDPL: UAE Data Office, Penalties, Free Zones (Articles 25-29 and Free Zone Coordination)
UAE PDPL: Controller and Processor Obligations (Articles 8-10, 18-21)
UAE PDPL: Sensitive Personal Data and Children (Articles 6-7)
Where Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (UAE PDPL) overlaps with the standards you already hold
Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (UAE PDPL) vs ISO 27001:2022View comparison →Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (UAE PDPL) vs SOC 2View comparison →Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (UAE PDPL) vs NIST CSF 2.0View comparison →Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (UAE PDPL) vs GDPRView comparison →Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (UAE PDPL) vs HIPAAView comparison →Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (UAE PDPL) vs PCI DSS 4.0View comparison →
What Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (UAE PDPL) means in your sector
Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (UAE PDPL) for Healthcare→Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (UAE PDPL) for Financial Services→Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (UAE PDPL) for Technology→Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (UAE PDPL) for Government→Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (UAE PDPL) for Manufacturing→Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (UAE PDPL) for Energy→Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (UAE PDPL) for Retail→Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (UAE PDPL) for Education→
What Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (UAE PDPL) means for your job
Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (UAE PDPL) for CISOs→Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (UAE PDPL) for Compliance Officers→Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (UAE PDPL) for Risk Managers→Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (UAE PDPL) for IT Directors→Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (UAE PDPL) for DPOs→Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (UAE PDPL) for Auditors→
Questions people ask about Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (UAE PDPL)
What is Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data?
Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the UAE PDPL) is the UAE's federal-level personal data protection law adopted on 26 September 2021 + published in the Official Gazette on 28 November 2021 + entered into force on 2 January 2022 (six months after publication).
How many controls does Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data have?
Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data contains 12 controls organized across 7 domains.
Where does Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data apply?
Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data is applicable in United Arab Emirates. Organizations operating in or serving customers in this jurisdiction should evaluate its requirements.
What frameworks does Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data map to?
Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data has control-to-control mappings with 288 other compliance frameworks in our database. Use our compliance platform to explore these mappings interactively.
How do I get started with Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data compliance?
Start by understanding the framework's key controls and domains. Our compliance platform provides AI-powered gap analysis and mapping tools to help you assess your current posture and build a remediation plan.
Query Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (UAE PDPL) programmatically
Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (UAE PDPL), its 12 controls and every mapping into other standards are available over a REST endpoint and an MCP server, so an agent can read them directly. The free tier is 10 calls a day and needs no signup.
Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (UAE PDPL) API reference and MCP config →What Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (UAE PDPL) requires, control by control
Each page carries the requirement text for one Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (UAE PDPL) control and what an assessor expects to see as evidence.
- UAE-PDPL-ART-10 Data Protection Officer (DPO) (UAE PDPL Article 10)
- UAE-PDPL-ART-8 Records of processing activities (UAE PDPL Article 8)
- UAE-PDPL-ART-9 Data breach notification (UAE PDPL Article 9)
- UAE-PDPL-FREEZONES Coordination with DIFC, ADGM and sectoral data protection regimes
- UAE-PDPL-STATUS UAE PDPL status, executive regulations, UAE Data Office guidance evolution
How ready are you for Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (UAE PDPL)?
Answer 25 questions and get a professional readiness report with gap analysis, maturity scores, and prioritised action items. Results in 5 minutes.
Written and maintained by Gerard Blokdyk, The Art of Service.Last updated .