The Dubai International Financial Centre (DIFC) Data Protection Law No. 5 of 2020 replaced the previous 2007 law, aligning more closely with GDPR standards. It applies to all entities established in the DIFC and those processing personal data of DIFC data subjects. The law introduces enhanced rights for individuals including right to data portability, right to object to processing, and right to erasure. It mandates privacy by design and default, requires Data Protection Impact Assessments for high-risk processing, and establishes strict requirements for international data transfers. Organizations must appoint a Data Protection Officer if they engage in large-scale systematic monitoring or processing of special categories of data. The law provides for administrative fines up to USD 1 million and introduces accountability obligations requiring organizations to demonstrate compliance. For Indian companies operating in DIFC, compliance is mandatory for business operations.
Health Data Management Policy (under Ayushman Bharat Digital Mission)
July 11, 2025
ABDM participants must comply with the Health Data Management Policy. Healthcare laws include the Clinical Establishments Act, National Medical Commission Act provisions requiring physician confidentiality,
