Skip survey header

Voluntary Notification by Non-DIFC Entities

1. My entity has a DIFC Commercial License or Commercial Permission: *This question is required.
Does your entity process DIFC Personal Data in accordance with Article 6(3)(b) (excerpt below) of the DIFC DP Law 2020?

“This Law applies to a Controller or Processor, regardless of its place of incorporation, that Processes Personal Data in the DIFC as part of stable arrangements, other than on an occasional basis. This Law applies to such Controller or Processor in the context of its Processing activity in the DIFC (and not in a Third Country), including transfers of Personal Data out of the DIFC”

Please use this Applicability assessment tool to help determine whether the DIFC DP Law 2020 is applicable to the type of processing your entity undertakes. *This question is required.
Are you sure? Processing can mean that your entity undertakes storage, analytics, direct marketing, on behalf of DIFC Entity, or other collection o f data from the DIFC, i.e., scraping of DIFC register, etc, Please also consider the jurisdictions to which Personal Data is transferred once it leaves the DIFC environment and whether any safeguards are in place in accordance with Articles 26 or 27.  For further information please see the DP Law 2020.
Do you wish to voluntarily notify the Commissioner of your processing operations as they pertain to Article 6(3)(b)?  This is not mandatory, but you may do so if you wish. *This question is required.