#
Rights exist in principle across federal, DIFC and ADGM instruments, but response-window specificity at federal level is unconfirmed.
Sub-modules (5)
Access RightRed
General characterization of GDPR-comparable rights exists; specific access-right mechanics for the federal PDPL were not located in available sources.
Absence provenance: unavailable. Searched: UAE PDPL data subject rights right to access erasure objection cross border transfer adequacy list.
Claims (1):
- The PDPL is characterized as giving data subjects considerable control and rights over their personal data, comparable in intent to the EU GDPR.
Rectification And ErasureAmber
ADGM's right to erasure does not apply where processing is necessary for archiving/research and erasure would seriously impair those objectives.
Claims (1):
- Under ADGM Regulations, the right to erasure does not apply to the extent that processing is necessary for archiving or research purposes where erasure would render impossible or seriously impair those objectives, provided appropriate safeguards are taken.
Restriction And ObjectionRed
No AE-specific restriction/objection mechanics beyond general GDPR-alignment characterization were confirmed.
Absence provenance: unavailable. Searched: UAE PDPL executive regulations 2024 issued Cabinet Decision breach notification timeline fine.
Data PortabilityRed
No AE-specific portability provisions were confirmed in available sources.
Absence provenance: unavailable. Searched: UAE Federal Decree Law 45 2021 PDPL fines penalties DPO threshold data subject rights.
Deadlines And Response WindowsRed
Specific statutory response-time deadlines for federal PDPL data-subject requests were not confirmed; secondary commentary noted uncertainty over implementing details shortly after enactment.
Claims (1):
- Shortly after PDPL enactment it remained uncertain exactly how breach reporting timelines (and, by extension, other statutory response windows) would be specified pending executive regulations.
No new data since the standing brief. 1 periodic run re-emitted it unchanged.
Sources and claims (3)
- ProbableIAPP — The PDPL is characterized as giving data subjects considerable control and rights over their personal data, comparable in intent to the EU GDPR.observed
- ProbableOneTrust DataGuidance — Under ADGM Regulations, the right to erasure does not apply to the extent that processing is necessary for archiving or research purposes where erasure would render impossible or seriously impair those objectives, provided appropriate safeguards are taken.observed
- UncertainIAPP — Shortly after PDPL enactment it remained uncertain exactly how breach reporting timelines (and, by extension, other statutory response windows) would be specified pending executive regulations.observed