The UAE Federal Decree-Law No. 45 of 2021 entered into force on 2 January 2022 (six months after publication on 28 November 2021). EXECUTIVE REGULATIONS + UAE DATA OFFICE GUIDANCE continue to evolve: the Data Office has issued a series of public guidance documents on cross-border transfers + DPIAs + sensitive data + AI / automated decision-making + minors + records + cooperation; the executive regulations operationalise the PDPL provisions including registration requirements + appointment of DPOs + cross-border transfer mechanisms + breach notification timelines. The 2024-2025 enforcement landscape includes: initial Data Office investigations + complaints + administrative penalties (the first penalties typically up to AED 5 million per violation + escalating for repeat); public consultations on AI + Generative AI data protection considerations; alignment with international data protection regimes including GDPR + CBPR (Cross-Border Privacy Rules); coordination with the wider Gulf Cooperation Council (GCC) data protection initiatives including the GCC Common Data Protection Framework. Future evolution: AI-specific data protection guidance + Children's data + Genetic / biometric data + Cybersecurity coordination + cross-sector data sharing initiatives (Open Banking + Open Insurance + Open Health) that interact with UAE PDPL.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.