Middle East & Africa · 2 laws · 12 requirements
United Arab Emirates: the laws your website or app must follow
If your customers are in United Arab Emirates, these are the privacy, consumer, security, accessibility and AI laws SafeLaunch checks your site against, with what each one requires and where in the law it says so.
How a SafeLaunch audit checks each one
- CheckedChecked automatically on every scan
- AI reviewLooked for by the AI analysis, reported only with evidence
- Your answersDecided from your answers to the audit questions
- PreparedPrepared for you in the report's compliance pack
- You confirmA scan can't see this; you need to confirm it
PDPL (Federal Decree-Law 45/2021)
In force since 2 Jan 2022, but executive regulations still not issued as of mid-2026, so penalties and procedures aren't operative.
Who it covers: Processing of people in the UAE (outside free zones with their own laws).
What it requires of a website or app (6)
- Information on purposes, recipients and rights before processingCheckedArt. 13
- Clear, specific consent, as easy to withdrawCheckedArt. 4–6
- Security measuresCheckedArt. 20
- Breach notification to the Data OfficeCheckedArt. 9
- Rights to access, correction and erasureCheckedArt. 13–15
- Transfers abroad to adequate countries or with safeguardsCheckedArt. 22–23
Sources:UAE data protection laws
DIFC Data Protection Law
DIFC Law No.
Who it covers: Controllers and processors incorporated in, or processing in, the DIFC.
What it requires of a website or app (6)
- Information to data subjects at collectionCheckedDP Law 2020, Part 4
- A lawful basis and valid consentCheckedDP Law 2020, Part 2
- Security appropriate to the riskCheckedDP Law 2020 (security)
- Breach notification to the CommissionerCheckedDP Law 2020 (breach)
- A DPIA before high-risk processing (including AI and autonomous systems)PreparedDP Law 2020 (DPIA); DP Regulations
- Notification of processing to the CommissionerPreparedDP Law 2020 (notifications)
Check your site against United Arab Emirates's rules
A free scan checks your website or app against these rules in about a minute and shows what applies, with evidence from your pages. The full report gives the exact fix for each finding.
Check my site freeOne free fix in your inbox each week
A new copy-paste prompt for Lovable, Cursor or Claude Code every week, with the rule behind it and how to check it worked, plus the Monday briefing on new laws and deadlines. No spam, unsubscribe in one click.
By signing up you agree to get these weekly emails. We send it with Kit, and you can unsubscribe at any time. What we share with Kit is in our privacy notice.
A plain-language summary of what each law requires of a website or app, from the SafeLaunch rulebook, with the provision and official sources. It is not legal advice and not every duty in each law is listed.