Data Protection Monitor
Global Privacy & Data Protection Intelligence

United Arab Emirates (AE) · Module Detail

United Arab Emirates: Sectoral Watch

← Full United Arab Emirates overview Build report with United Arab Emirates Request deeper dive

#

Telecoms and health overlays are documented; financial-sector overlay evidence is limited to one regulation; credit, education and insurance sub-modules have no confirmed evidence.

Supervisory authorityTelecommunications and Digital Government Regulatory Authority (TRA/TDRA)
Traffic-light rationale — AmberTelecoms and health overlays are documented; financial-sector overlay evidence is limited to one regulation; credit, education and insurance sub-modules have no confirmed evidence.

Sub-modules (7)

Financial Sector OverlayAmber

The UAE Stored Value Facilities Regulation was reportedly the first UAE law to mandate data minimization as a compliance requirement.

Claims (1):

  • The UAE Stored Value Facilities Regulation was the first UAE law to specifically mandate information/data minimization as a compliance requirement.

Health Sector OverlayAmber

The Health Data Law/ICT Health Law governs ICT use in healthcare across mainland and free zones; Abu Dhabi's DOH applies its own 2020 healthcare-data-privacy standards; Dubai Healthcare City is separately governed by Federal Law No. 2 of 2019.

Claims (3):

  • The UAE Health Data Law/ICT Health Law applies to all methods and uses of information and communication technology in the UAE healthcare sector, covering both mainland and free-zone entities.
  • The Department of Health Abu Dhabi's Standards on Healthcare Data Privacy 2020 apply specifically to entities within the Emirate of Abu Dhabi and strictly define how health data may be used, stored, shared and protected.
  • Dubai Healthcare City is governed by Federal Law No. 2 of 2019 (Healthcare Data Protection Law), which regulates protection of individuals' data within DHCC, including restrictions on data disclosures and transfers, superseding the 2013 DHCC Data Protection Regulation.

Telecoms And EprivacyAmber

The Law Regulating the Telecommunications Sector gives the TRA jurisdiction over customer-data-use regulation and criminalizes unauthorized disclosure of call/message content.

Claims (1):

  • The Law Regulating the Telecommunications Sector gives the Telecommunications Regulatory Authority jurisdiction to implement regulations concerning customer data use (Article 14) and criminalizes disclosure of the content of a call or message sent through the network (Article 72).

Employment DataRed

No AE-specific employment-data overlay was confirmed in available sources beyond the general PDPL framework.

Absence provenance: unavailable. Searched: UAE TDRA telecommunications data protection consumer protection regulation cybercrime law personal data.

Credit And ScoringRed

No AE-specific credit-scoring data rules were confirmed in available sources.

Absence provenance: unavailable. Searched: UAE TDRA telecommunications data protection consumer protection regulation cybercrime law personal data.

EducationRed

No AE-specific education-sector data rules were confirmed in available sources.

Absence provenance: unavailable. Searched: UAE TDRA telecommunications data protection consumer protection regulation cybercrime law personal data.

InsuranceRed

No AE-specific insurance-sector data rules were confirmed in available sources.

Absence provenance: unavailable. Searched: UAE TDRA telecommunications data protection consumer protection regulation cybercrime law personal data.

Category narrative78 words

Telecommunications and healthcare are the most clearly documented sectoral overlays: the TRA derives customer-data jurisdiction from the Law Regulating the Telecommunications Sector, health data is separately governed by the federal ICT Health Law and (within Dubai Healthcare City) Federal Law No. 2 of 2019, and Abu Dhabi's Department of Health imposes its own healthcare-data-privacy standards. A financial-sector data-minimization requirement appears in the Stored Value Facilities Regulation. Credit-scoring, education, and insurance-sector-specific data rules were not confirmed in available sources.

Sources and claims (5)
  1. ProbableOneTrust DataGuidance — The UAE Stored Value Facilities Regulation was the first UAE law to specifically mandate information/data minimization as a compliance requirement.observed
  2. ProbableOneTrust DataGuidance — The UAE Health Data Law/ICT Health Law applies to all methods and uses of information and communication technology in the UAE healthcare sector, covering both mainland and free-zone entities.observed
  3. ProbableOneTrust DataGuidance — The Department of Health Abu Dhabi's Standards on Healthcare Data Privacy 2020 apply specifically to entities within the Emirate of Abu Dhabi and strictly define how health data may be used, stored, shared and protected.observed
  4. ProbableOneTrust DataGuidance — Dubai Healthcare City is governed by Federal Law No. 2 of 2019 (Healthcare Data Protection Law), which regulates protection of individuals' data within DHCC, including restrictions on data disclosures and transfers, superseding the 2013 DHCC Data Protection Regulation.observed
  5. ProbableOneTrust DataGuidance — The Law Regulating the Telecommunications Sector gives the Telecommunications Regulatory Authority jurisdiction to implement regulations concerning customer data use (Article 14) and criminalizes disclosure of the content of a call or message sent through the network (Article 72).observed