Regulates the collection, processing, and storage of personal data in the United Arab Emirates, establishing data subject rights, controller and processor obligations, and rules for cross-border data transfers. Applies to entities processing personal data within the UAE or of UAE residents.
8
Rules extracted
31
Obligations decomposed
3.9x
Avg obligations per rule
🇦🇪 United Arab Emirates
Jurisdiction
Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) was issued in September 2021 and came into effect on 2 January 2022. Executive Regulations were issued in March 2023. The law establishes comprehensive data protection requirements including lawful bases for processing, consent requirements, data subject rights, controller and processor obligations, cross-border transfer restrictions, breach notification, and enforcement by the UAE Data Office. It applies to the processing of personal data by controllers and processors located in the UAE or processing data of UAE residents. Government entities, free zone entities with their own data protection laws, health data under special legislation, and banking/credit data are exempted.
Source
1
Regulation
Extracted
8
Rules
Decomposed
31
Obligations
Decomposition ratio
Each rule is decomposed into an average of 3.9 atomic obligations — the smallest testable units that can be independently violated.
Fully extracted & scored
All 31 obligations have been decomposed, titled, risk-scored, and embedded for semantic matching.
Every obligation in Federal Decree-Law 45/2021 is scored across independent risk dimensions:
Obligation Weight
How critical within the regulatory framework
Violation Likelihood
How often breached in practice
Enforcement Evidence
Regulator enforcement history and penalties
Cascade Dependency
How many obligations depend on this one
Don't have a compliance policy yet? AuditDSS generates a complete compliance pack for Federal Decree-Law 45/2021 — alone or combined with other regulations your business needs. Every clause is mapped to specific obligations.
High-level commitments and governance framework covering Federal Decree-Law 45/2021 requirements.
Step-by-step operational procedures to implement each policy commitment.
Ready-to-use forms, registers, and checklists for day-to-day compliance operations.
Combine Federal Decree-Law 45/2021 with other regulations into a single unified compliance pack for your business.
Upload your compliance policy, program manual, or operational document. AuditDSS accepts any text-based document.
Your document is scored against every obligation in Federal Decree-Law 45/2021. Each claim is mapped to the obligation tree and evaluated for coverage.
Receive every gap ranked by risk priority with remediation guidance, enforcement evidence, and cascade impact analysis.
16 rules, 260 obligations
9 rules, 135 obligations
29 rules, 203 obligations
10 rules, 32 obligations
10 rules, 41 obligations
19 rules, 200 obligations
46 rules, 572 obligations
8 rules, 201 obligations
Upload your document and get a risk-scored gap analysis against 31 Federal Decree-Law 45/2021 obligations in under 5 minutes.