The Dubai International Financial Centre Commissioner of Data Protection has issued regulatory guidance clarifying obligations under the DIFC Data Protection Law. The regime closely aligns with international standards such as the GDPR and includes requirements relating to lawful processing, security measures, and international data transfers. Companies operating within the DIFC or processing data linked to DIFC entities must ensure that data governance frameworks, contracts, and cross border transfer arrangements comply with the centre’s regulatory requirements.