The Dubai International Financial Centre (DIFC) Data Protection Law No. 5 is a new data protection law that will take effect on July 1, 2020. Businesses have until October 1 to comply.

The law combines data protection practices from a variety of laws including the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

An important difference to keep in mind for this regulation is that Privacy Shield (which permits transferring personal data between the EU/EEA and the USA) is not an option for the transfer of information from the DIFC to any other country.