# UAE PDPL Article (22): Cross-Border Transfer and Sharing of Personal Data for Processing Purposes if a Proper Protection Level is Available

Federal Decree by Law No. (45) of 2021 Concerning the Protection of Personal Data (UAE PDPL), version 2026.1, in force since 2 January 2022. Read from https://uaelegislation.gov.ae/ar/legislations/1972/download. Each clause starts with its key, which is how to cite it.

This is the official English translation. Where the two differ, the Arabic text prevails: https://dpolens.com/ar/laws/uae-pdpl/art-22.md

## uae-pdpl:art-22

Personal Data may be transferred to outside of the State in the following cases approved by the Bureau:

## uae-pdpl:art-22:para-1

1. The State or Province to which the Personal Data is transferred shall have legislations addressing Personal Data Protection. This includes most significant provisions, measures, controls, stipulations and rules related to the protection of the privacy and confidentiality of the Date Subject's Personal Data, and his/her ability to exercise their legal rights. The State or the Province shall also have a judicial o regulatory authority imposing appropriate measures against the Controller or the Processor.

## uae-pdpl:art-22:para-2

2. If the State joins a bilateral or multilateral agreement related to the protection of Personal Data concluded with countries to which the Personal Data is transferred.

Page: https://dpolens.com/laws/uae-pdpl/art-22