UAE PDPL

Data Privacy

The UAE's first comprehensive federal data protection law — Federal Decree-Law No. 45 of 2021 — signals the nation's commitment to privacy as a cornerstone of its digital economy. This assessment examines your compliance across the PDPL's requirements for lawful processing, transparency, data subject rights (access, rectification, erasure, portability, objection), security safeguards, privacy by design, processor management, and cross-border transfers. It also addresses the unique consideration of parallel compliance for organizations operating within DIFC or ADGM free zones, which maintain their own data protection regimes alongside the federal law.

Domains

Questions

~24 min

Estimated Time

What You'll Be Assessed On

Scope & Applicability Applicability Check

3 questions

Data Protection Principles (Art. 5)

4 questions

Transparency & Privacy Notices (Art. 7–8)

2 questions

Data Subject Rights (Art. 13–18)

4 questions

Security, Breach Notification & Privacy by Design (Art. 20–22, 26)

3 questions

Controller & Processor Obligations (Art. 19–20)

3 questions

Cross-Border Transfers (Art. 22)

2 questions

Governance, Training & Accountability

3 questions

Step-by-Step

Answer questions one domain at a time with progress tracking.

Instant Scoring

Get a weighted maturity score and per-domain breakdown immediately.

Actionable Roadmap

Receive a phased remediation plan tailored to your results.

Takes approximately 24 minutes to complete.