The Dubai International Financial Centre (DIFC) has announced revisions to several legislations through the DIFC Amendment Law, Law No. 1 of 2005.
According to a press release issued today, these adjustments include modifications to data protection laws aimed at enhancing protections and litigation rights for data owners within the DIFC. The new legislative changes strive to align the centre’s laws with international best practices.
The DIFC has made amendments to data protection laws to introduce a private right of action through the DIFC courts. This change strengthens the legal rights and recourse available to data owners whose personal data has been processed in violation of data protection regulations.
Additional clarifications have been made, addressing the application scope of data protection laws, including its reach beyond local jurisdiction. Furthermore, Article 28 has been updated to specify the adequacy criteria for assessing whether third countries can appropriately receive personal data.
Additionally, certain clarifying amendments have been introduced concerning the law on trusts, insolvency, and labor.
The amendment law was issued on July 8, 2025, and came into effect on July 15, 2025.