Data Protection Monitor
Global Privacy & Data Protection Intelligence

United Arab Emirates (AE) · Module Detail

United Arab Emirates: AdTech & Commercial Privacy

#

No comprehensive adtech-specific regime was confirmed for the UAE in available research; only the general PDPL consent framework applies.

Traffic-light rationale — RedNo comprehensive adtech-specific regime was confirmed for the UAE in available research; only the general PDPL consent framework applies.

Sub-modules (6)

Cookies And TrackersRed

No AE-specific cookie/tracker law was confirmed.

Absence provenance: unavailable. Searched: UAE Federal Data Protection Law 2021 PDPL UAE Data Office, UAE PDPL executive regulations 2024 issued Cabinet Decision breach notification timeline fine.

Dark PatternsRed

No AE-specific dark-pattern prohibition was confirmed.

Absence provenance: unavailable. Searched: UAE Federal Data Protection Law 2021 PDPL UAE Data Office.

Opt Out SignalsRed

No AE-specific recognition of browser-level opt-out signals (e.g., GPC) was confirmed.

Absence provenance: unavailable. Searched: UAE Federal Data Protection Law 2021 PDPL UAE Data Office.

Clean Rooms And DcrRed

No AE-specific clean-room/data-collaboration-room rules were confirmed.

Absence provenance: unavailable. Searched: UAE Federal Data Protection Law 2021 PDPL UAE Data Office.

Cross Context AdvertisingRed

No AE-specific cross-context-advertising ('sale'/'share') framework analogous to CPRA was confirmed.

Absence provenance: unavailable. Searched: UAE Federal Data Protection Law 2021 PDPL UAE Data Office.

Direct MarketingAmber

The PDPL's general consent requirement covers processing for direct-marketing purposes in principle, but no AE-specific suppression-list or marketing-consent statute was confirmed.

Claims (1):

  • The PDPL requires organizations to create consent forms and disclosures for the processing of all personal data, which in practice would extend to processing for direct-marketing purposes absent a specific statutory exception.
Category narrative27 words

No AE-specific cookie/tracker consent regime, dark-pattern prohibition, Global-Privacy-Control-style opt-out recognition, clean-room rule, or direct-marketing-specific consent/suppression regime was located in available sources beyond the PDPL's general consent-for-processing requirement.

Sources and claims (1)
  1. ProbableIAPP — The PDPL requires organizations to create consent forms and disclosures for the processing of all personal data, which in practice would extend to processing for direct-marketing purposes absent a specific statutory exception.observed