Scope of Application of the Decree by Law
Article (2) of the UAE PDPL, as in force since 2 January 2022. Its key is uae-pdpl:art-2, and each paragraph and point has its own.
Provisions of this Decree by Law shall apply to the processing of all or part of the Personal Data by means of electronic systems which operate automatically, or by other means, by the following:
Each Data Subject residing in the State or having a place of business in it.
Each Controller or Processor residing in the State and carrying out the activities of processing Personal Data of Data Subjects inside and outside the State.
Each Controller or Processor residing outside the State and carrying out the activities of processing Personal Data of Data Subjects inside the State.
Provisions of this Decree by Law shall not apply to the following:
Government Data
Governmental entities which control or process Personal Data.
Personal Data held by the security and judicial authorities
A Data Subject who processes his/her data for personal purposes.
Personal Health Data that has legislation regulating its protection and processing.
Personal banking and credit data and information that have legislation regulating their protection and processing.
Companies and establishments located in free zones in the Country and have special legislations regarding Personal Data protection.