UAE Personal Data Protection Law, Made Workable
The UAE Personal Data Protection Law sets out how organisations in the UAE collect, use and protect personal data, and the rights people have over it.
CAPA-21Scope and DefinitionsIn progressCAPA-24Lawful Grounds for ProcessingOverdueHow UAE PDPL Is Organised in Arbor
UAE PDPL loads with its key areas, ready to assign and assess.
- 01Scope and Definitions
- 02Processing Principles
- 03Lawful Grounds for Processing
- 04Data Subject Rights
- 05Controller and Processor Duties
- 06Security and Breach Notification
- 07Cross-Border Transfers
- 08Data Protection Officer
What Arbor Does with UAE PDPL
- Records of processing
- Data subject requests tracked against a 30-day clock
- DPIA, consent and breach handling
- Privacy controls assessed and tracked to closure
No Clause Numbers to Memorise
Arbor AI suggests the UAE PDPL requirements that apply as you work.
UAE PDPL in Four Steps
Load
UAE PDPL loads with its full structure, kept up to date by our team.
Set Scope
Decide what applies and record the reason.
Assess
Assign owners, score each requirement and link evidence.
Prove
Close gaps with corrective actions and report with confidence.
Do the Work Once for UAE PDPL
Where controls overlap, shared evidence counts toward related frameworks, so nothing is done twice.
Frequently Asked Questions
Is UAE PDPL Kept Up to Date?
Yes. Our team loads UAE PDPL and updates it when the standard changes.
Can We Import Our Existing UAE PDPL Assessment?
Yes. Use the Excel template and Arbor checks every row before it loads.
Can UAE PDPL Share Evidence with Other Frameworks?
Yes. Evidence is uploaded once and linked to every requirement it supports.
See UAE PDPL in Arbor GRC
Bring your current risk register. We can import it from Excel during the demo, so you see your own risks in Arbor, not ours.