eSignature Lawfulness for Personal Leave Policy in UAE

How to eSign a document: eSignature lawfulness for Personal Leave Policy in UAE

uae's federal data protection law finally came into effect on 2nd january 2022 and the companies will have six months from the date of executive regulations to be issued by march 20th 2022 to get compliant with the law the law focuses mainly on data subject rights data breach requirements data protection impact assessments data transfer requirements and notification and record keeping requirements uae data office will be the regulatory authority and has the power to process all personal data by controllers and processors located in the uae and outside the uae and can exempt you ae companies that do not process large volumes of personal data this law applies to the processing of all personal data by controllers and processors located in the uae processing personal data of data subjects within the uae similar to gdpr it also applies to every data controller or data processor established outside the uae carrying out processing activities in relation to data subjects in the uae the law does not apply to government data public entities the processing of personal data for personal use health or credit data governed by their own respective legislation and organizations and entities established in free zones with their own personal data protection laws the law does not cover personal health data or personal banking and credit data and is not applicable to the uae free zones both controllers and processors must develop such procedures and take such measures as required in ance with best international standards and practices and commensurate to the risk and cost involved with the processing to ensure an appropriate level of information security the law includes a list of such measures to be tested and evaluated controllers on becoming aware of any personal data breach should inform the data office of the breach and any investigation conducted into the breach they must also notify the data subject of the breach processors must inform the controller of any breach controllers must appoint a dpo in certain circumstances controllers must conduct dpias in particular circumstances processors must maintain a record of processing activities of the processing conducted on behalf of the controller which must be made available to the uae data office upon request controllers and processors must implement technical and organizational measures to maintain a high standard of data security appropriate to the level of risk the law indicates that there will be a transition period of six months from the date of publication of the executive regulations for companies to achieve compliance individuals have the right to not have their personal information processed without their consent except in specified circumstances and can withdraw their consent at any time individuals can make complaints to the office administrative penalties can be imposed as part of a decision by the council of ministers in response to a breach of law or the executive regulations and based on a proposal from the data office's director general data subjects can file a complaint with the data office if there is a breach of law by a controller or processor the cabinet based on suggestions of the director of the office will issue decisions to determine whether actions constitute a breach of the law and determine the appropriate sanctions individuals also have the right to data portability and to object to processing and or automated processing including profiling these days even the data protection non-compliance in smaller and less important offices of a company group may now lead to significant ramifications the efforts for being compliant with the new data law requirements are generally high not all requirements can reasonably be fulfilled at once the company will have to assess what kind of data processing activities are of the biggest risk to its business rights of the data subjects as well as the risks that are likely to lead to high fines we help companies allocate and plan their required resources and help in the implementation of a compliant data protection structure including conducting data protection impact assessments want to know more about the details of this new federal data protection law from the uae government do contact our experts today