Skip survey header

Application Form – Regulation 10 Advisory Committee

Introduction

Regulation 10.3.3 obligates the DIFC Commissioner of Data Protection (the Commissioner) to establish audit and certification requirements applicable to Systems used in High Risk Processing Activities.

To this end, in accordance with Article 47 of the Data Protection Law, DIFC Law No 5. of 2020 (the DP Law 2020), the Commissioner seeks to establish an Advisory Committee that will oversee the implementation of Regulation 10, including activities to support the objectives of Regulation 10.3.3. This includes but is not limited to creation of an Accreditation Body that will accredit the certification requirements as per Article 51, creation of the certification scheme itself as per Article 50, and appointment criteria for Automated Systems Officers (ASO).

Proposed Objectives:

The scope of the Regulation 10 Advisory Committee includes achieving the following objectives.*

  • Advising the Commissioner on the requirements and any necessary updates to Regulation 10, including but not limited to appropriate accountability, audit and certification requirements applicable to Autonomous or Semi-autonomous System to engage in High Risk Processing Activities in accordance with Regulation 10.3.3 (Purpose);
  • Assisting the Commissioner with the drafting of guidelines, recommendations, and best practices for the Purpose;
  • Assisting the Commissioner with respect to accreditation schemes, codes of conduct or mechanisms for data transfer, including but not limited to the criteria for accreditation of a certification body and subsequent accreditation of a certification body empowered to create the necessary audit and certification requirements for compliance with Regulation 10.3.3(a)  based on the Advisory Board recommendations;
  • Drafting Regulations, including but not limited to supplemental obligations of Regulation 10, as necessary;
  • Providing input, as requested by the Commissioner, regarding any question arising under the Data Protection Law 2020 that the Commissioner is required to consider;
  • Preparing reports for the Commissioner regarding Regulation 10 Committee developments, ongoing requirements and achieved / recommended outcomes; and liaising with other data protection committees or authorities as directed by the Commissioner, including but not limited to furtherance of the Purpose.

*Any additional outcomes of the primary committee and any sub-committees shall be discussed and documented accordingly on approved templates and recorded with the Commissioner's Office. 
 

Membership Selection Criteria:

Regulation 10 Advisory Committee Members must meet the following criteria:**
 
  1. Expertise in the cross over between data protection and advanced technology development and awareness of related emerging issues; specifically around the promulgation and use of autonomous systems used for, directly or indirectly, processing personal data, i.e., generative AI and Machine Learning
  2. Legal or compliance expertise that includes extensive risk assessment and impact on the availability of rights and redress for data subjects
  3. Technology developers or experience advising or establishing X-tech and innovation technology developers
  4. Understanding of the evolution of the rule of law, more specifically as it regards international law and those laws and regulations applicable to personal data protection, or, where applicable, of autonomous or semi-autonomous systems (including but not limited to generative artificial intelligence, complex large language model development, general complex technology, etc)
  5. Experience liaising with data protection regulators, technology regulators, or government authorities
  6. Innovative and agile problem solving skills
  7. Strategic planning experience, i.e., forward thinking with respect to outcomes of advanced technology and impact on privacy and security rights
  8. Interest and experience in drafting white papers on relevant topics and participating in outreach activities; submitting samples of publications preferred (i.e., white papers, articles, blog posts or other thought leadership pieces)
  9. Reliable participation in events and meetings with stakeholders, both in person and virtually
  10. Accountability, inclusivity, interoperability, transparency and general professional acumen

**The selection of Advisory Committee Members is at the sole discretion of the DIFC Data Protection Commissioner.  No appeals will be permitted if you are not selected. Thank you in advance for your understanding. 
0%