---
title: "United Arab Emirates — Children & Vulnerable Groups | Data Protection Monitor"
canonical: https://dataprotection.gi/jurisdictions/united-arab-emirates/children-and-vulnerable-groups/
source_html: /jurisdictions/united-arab-emirates/children-and-vulnerable-groups/index.html
description: "United Arab Emirates — Children & Vulnerable Groups: children_and_vulnerable_groups Children & Vulnerable Groups red 5 sub-modules 2 claims Red ▾ # Coverage of children's/vulnerable-groups' data is thin and inconsistent acr"
generated_at: 2026-10-25T04:46:50Z
content_sha256: 930a1d95b3a5402d206be5e5a445c1ed90b99d920b26b479ca89ae53fd2fe2d1
generator: "fe-fleet/md-twin@1.0"
---
# United Arab Emirates — Children & Vulnerable Groups | Data Protection Monitor

### D9Children & Vulnerable Groupsred5 sub-modules2 claimsRed▾#

Coverage of children's/vulnerable-groups' data is thin and inconsistent across the UAE's fragmented regime; no dedicated federal children's-data regime was confirmed.

Traffic-light rationale — Red Coverage of children's/vulnerable-groups' data is thin and inconsistent across the UAE's fragmented regime; no dedicated federal children's-data regime was confirmed.

#### Sub-modules (5)

#### Age VerificationAmber

ADGM defines a child as a natural person under 18, but no age-verification mechanism was confirmed.

Claims (1):

- ADGM Data Protection Regulations define a child as a natural person under the age of 18, in contrast to GDPR's default age of consent of 16 (adjustable by Member States to not younger than 13), but do not explicitly outline requirements for consent to process children's data.

#### Parental ConsentRed

ADGM does not explicitly outline consent requirements for children's data; DIFC Law 2020 does not generally address children's data.

Claims (2):

- ADGM Data Protection Regulations define a child as a natural person under the age of 18, in contrast to GDPR's default age of consent of 16 (adjustable by Member States to not younger than 13), but do not explicitly outline requirements for consent to process children's data.
- DIFC Law 2020, consistent with its 2007 predecessor, does not generally refer to children's data or provide specific requirements for collecting personal data from children.

#### Minor Profiling BansRed

No AE-specific minor-profiling ban was confirmed in available sources.

Absence provenance: unavailable . Searched: UAE Federal Data Protection Law 2021 PDPL UAE Data Office.

#### Education SettingsRed

No AE-specific education-sector children's-data rules were confirmed.

Absence provenance: unavailable . Searched: UAE TDRA telecommunications data protection consumer protection regulation cybercrime law personal data.

#### Dependent AdultsRed

No AE-specific dependent-adult data protections were confirmed in available sources.

Absence provenance: unavailable . Searched: UAE Federal Data Protection Law 2021 PDPL UAE Data Office.

Category narrative 59 words

Free-zone instruments provide limited, inconsistent coverage of children's data: ADGM defines a child as under 18 (versus GDPR's 16, adjustable to 13) but does not set explicit parental-consent mechanics, while DIFC Law 2020, like its 2007 predecessor, does not generally address children's data at all. No federal PDPL-specific children's-data provisions, minor-profiling bans, education-setting rules, or dependent-adult protections were confirmed.

No new data since the standing brief. 1 periodic run re-emitted it unchanged.

Evidence 2

Sources and claims (2)
- Probable[OneTrust DataGuidance](https://www.dataguidance.com/sites/default/files/gdpr_v._adgm.pdf) — ADGM Data Protection Regulations define a child as a natural person under the age of 18, in contrast to GDPR's default age of consent of 16 (adjustable by Member States to not younger than 13), but do not explicitly outline requirements for consent to process children's data.observed 2026-07-29
- Probable[OneTrust DataGuidance](https://www.dataguidance.com/sites/default/files/gdpr_v_difc_law.pdf) — DIFC Law 2020, consistent with its 2007 predecessor, does not generally refer to children's data or provide specific requirements for collecting personal data from children.observed 2026-07-29