DIFC amends data protection regulations

Arabian Post Staff

Dubai International Financial Centre (DIFC) has enacted amendments to the Data Protection Regulations. The amendments enhance the current data protection framework, keeping the Centre at the forefront of data protection in the region.

The amendments to the Data Protection Regulations address the means for better, safer and more ethical management of personal data processing and operations. The updated regulations provide clarity on:

In particular, Regulation 10 is ground-breaking as it is the first enacted regulations in the MEASA region on the processing of personal data via autonomous and semi-autonomous systems such as artificial intelligence (AI) or generative, machine learning technology.

A key feature of Regulation 10 is that it creates space for DIFC to be a platform for interoperability of the many and varied guidelines and principles issued by sovereign governments and non-governmental organisations. Creating a plug and play space for application of ‘best fit’ principles to AI technology development is fundamental, responsible and ethical processing of personal data in such systems.

Use cases is expected to be tested through further consultation, inspection or supervision.  The Commissioner’s Office is also considering testing use cases through participation in a regulatory sandbox comprised of technology developers, users, regulators and non- governmental or quasi-governmental organisations, all of whom have an interest in keeping systems safe and their uses practical for the digital age.

Also published on Medium.