--- title: "United Arab Emirates — Sectoral Watch | Data Protection Monitor" canonical: https://dataprotection.gi/jurisdictions/united-arab-emirates/sectoral-watch/ source_html: /jurisdictions/united-arab-emirates/sectoral-watch/index.html description: "United Arab Emirates — Sectoral Watch: sectoral_watch Sectoral Watch 7 sub-modules 5 claims Amber ▾ # Telecoms and health overlays are documented; financial-sector overlay evidence is limited to one regulation; credit, educ" generated_at: 2026-10-25T04:46:50Z content_sha256: 12d844256021c04edc8673cdb90ddb75858e78adb1aaf3dee09f728e503917d2 generator: "fe-fleet/md-twin@1.0" --- # United Arab Emirates — Sectoral Watch | Data Protection Monitor ### D6Sectoral Watch7 sub-modules5 claimsAmber▾# Telecoms and health overlays are documented; financial-sector overlay evidence is limited to one regulation; credit, education and insurance sub-modules have no confirmed evidence. Supervisory authority Telecommunications and Digital Government Regulatory Authority (TRA/TDRA) Traffic-light rationale — Amber Telecoms and health overlays are documented; financial-sector overlay evidence is limited to one regulation; credit, education and insurance sub-modules have no confirmed evidence. #### Sub-modules (7) #### Financial Sector OverlayAmber The UAE Stored Value Facilities Regulation was reportedly the first UAE law to mandate data minimization as a compliance requirement. Claims (1): - The UAE Stored Value Facilities Regulation was the first UAE law to specifically mandate information/data minimization as a compliance requirement. #### Health Sector OverlayAmber The Health Data Law/ICT Health Law governs ICT use in healthcare across mainland and free zones; Abu Dhabi's DOH applies its own 2020 healthcare-data-privacy standards; Dubai Healthcare City is separately governed by Federal Law No. 2 of 2019. Claims (3): - The UAE Health Data Law/ICT Health Law applies to all methods and uses of information and communication technology in the UAE healthcare sector, covering both mainland and free-zone entities. - The Department of Health Abu Dhabi's Standards on Healthcare Data Privacy 2020 apply specifically to entities within the Emirate of Abu Dhabi and strictly define how health data may be used, stored, shared and protected. - Dubai Healthcare City is governed by Federal Law No. 2 of 2019 (Healthcare Data Protection Law), which regulates protection of individuals' data within DHCC, including restrictions on data disclosures and transfers, superseding the 2013 DHCC Data Protection Regulation. #### Telecoms And EprivacyAmber The Law Regulating the Telecommunications Sector gives the TRA jurisdiction over customer-data-use regulation and criminalizes unauthorized disclosure of call/message content. Claims (1): - The Law Regulating the Telecommunications Sector gives the Telecommunications Regulatory Authority jurisdiction to implement regulations concerning customer data use (Article 14) and criminalizes disclosure of the content of a call or message sent through the network (Article 72). #### Employment DataRed No AE-specific employment-data overlay was confirmed in available sources beyond the general PDPL framework. Absence provenance: unavailable . Searched: UAE TDRA telecommunications data protection consumer protection regulation cybercrime law personal data. #### Credit And ScoringRed No AE-specific credit-scoring data rules were confirmed in available sources. Absence provenance: unavailable . Searched: UAE TDRA telecommunications data protection consumer protection regulation cybercrime law personal data. #### EducationRed No AE-specific education-sector data rules were confirmed in available sources. Absence provenance: unavailable . Searched: UAE TDRA telecommunications data protection consumer protection regulation cybercrime law personal data. #### InsuranceRed No AE-specific insurance-sector data rules were confirmed in available sources. Absence provenance: unavailable . Searched: UAE TDRA telecommunications data protection consumer protection regulation cybercrime law personal data. Category narrative 78 words Telecommunications and healthcare are the most clearly documented sectoral overlays: the TRA derives customer-data jurisdiction from the Law Regulating the Telecommunications Sector, health data is separately governed by the federal ICT Health Law and (within Dubai Healthcare City) Federal Law No. 2 of 2019, and Abu Dhabi's Department of Health imposes its own healthcare-data-privacy standards. A financial-sector data-minimization requirement appears in the Stored Value Facilities Regulation. Credit-scoring, education, and insurance-sector-specific data rules were not confirmed in available sources. Evidence 5 Sources and claims (5) - Probable[OneTrust DataGuidance](https://www.dataguidance.com/opinion/uae-data-privacy-oversight-rise) — The UAE Stored Value Facilities Regulation was the first UAE law to specifically mandate information/data minimization as a compliance requirement.observed 2026-07-29 - Probable[OneTrust DataGuidance](https://www.dataguidance.com/opinion/uae-data-privacy-oversight-rise) — The UAE Health Data Law/ICT Health Law applies to all methods and uses of information and communication technology in the UAE healthcare sector, covering both mainland and free-zone entities.observed 2026-07-29 - Probable[OneTrust DataGuidance](https://www.dataguidance.com/opinion/uae-data-privacy-oversight-rise) — The Department of Health Abu Dhabi's Standards on Healthcare Data Privacy 2020 apply specifically to entities within the Emirate of Abu Dhabi and strictly define how health data may be used, stored, shared and protected.observed 2026-07-29 - Probable[OneTrust DataGuidance](https://www.dataguidance.com/jurisdictions/united-arab-emirates-dubai-health-care-city) — Dubai Healthcare City is governed by Federal Law No. 2 of 2019 (Healthcare Data Protection Law), which regulates protection of individuals' data within DHCC, including restrictions on data disclosures and transfers, superseding the 2013 DHCC Data Protection Regulation.observed 2026-07-29 - Probable[OneTrust DataGuidance](https://www.dataguidance.com/opinion/uae-data-privacy-oversight-rise) — The Law Regulating the Telecommunications Sector gives the Telecommunications Regulatory Authority jurisdiction to implement regulations concerning customer data use (Article 14) and criminalizes disclosure of the content of a call or message sent through the network (Article 72).observed 2026-07-29