# UAE PDPL Article (13): Right to Receive Information

Federal Decree by Law No. (45) of 2021 Concerning the Protection of Personal Data (UAE PDPL), version 2026.1, in force since 2 January 2022. Read from https://uaelegislation.gov.ae/ar/legislations/1972/download. Each clause starts with its key, which is how to cite it.

This is the official English translation. Where the two differ, the Arabic text prevails: https://dpolens.com/ar/laws/uae-pdpl/art-13.md

## uae-pdpl:art-13:para-1

1. The Data Subject has the right, by submitting a request to the Controller without any consideration, to obtain the following information:

### uae-pdpl:art-13:para-1:pt-a

a. The types of its Personal Data that are being processed.

### uae-pdpl:art-13:para-1:pt-b

b. Purposes of processing.

### uae-pdpl:art-13:para-1:pt-c

c. Decisions made based on automated processing, including profiling.

### uae-pdpl:art-13:para-1:pt-d

d. The targeted sectors or establishments with whom its personal data will be shared from inside and outside the State.

### uae-pdpl:art-13:para-1:pt-e

e. Controls and standards for the period of storage and preservation of his/ her personal data.

### uae-pdpl:art-13:para-1:pt-f

f. Procedures for correcting, erasing or limiting processing and objection to his/ her personal data.

### uae-pdpl:art-13:para-1:pt-g

g. Protection measures for cross-border processing carried out in accordance with Articles (22) and (23) of this By-Law.

### uae-pdpl:art-13:para-1:pt-h

h. Actions to be taken in the event of a breach or misuse of his/ her Personal Data, especially if the breach or misuse has a direct and serious threat to the privacy and confidentiality of his/her Personal Data.

### uae-pdpl:art-13:para-1:pt-i

i. How to submit complaints to the Bureau.

## uae-pdpl:art-13:para-2

2. In all cases, the Controller shall, before starting the processing, provide the Data Subject with the information stipulated in paragraphs (b), (d) and (g) of Paragraph (1) of this Article.

## uae-pdpl:art-13:para-3

3. The Controller may reject the Data Subject's request to obtain the information mentioned in Paragraph (1) of this Article, if the following is established:

### uae-pdpl:art-13:para-3:pt-a

a. The request is not related to the information referred to in Paragraph (1) of this Article, or it is excessively repetitive.

### uae-pdpl:art-13:para-3:pt-b

b. The request conflicts with judicial procedures or investigations conducted by competent authorities.

### uae-pdpl:art-13:para-3:pt-c

c. The request may negatively affect the efforts of the Controller to protect information security.

### uae-pdpl:art-13:para-3:pt-d

d. The request affects the privacy and confidentiality of Personal Data of third parties.

Page: https://dpolens.com/laws/uae-pdpl/art-13