DP Assessment Tool – Applicability

Article 6 of DP Law 2020 addresses applicability. Please use this tool to understand whether DIFC DP Law 2020 applies to your business / Personal Data operations (if any).

Please note that assessment tool / guidance is for informational purposes only and should not be construed as legal advice provided by the Commissioner’s Office.

1. Are you a Controller or Processor incorporated in the DIFC?

Controllers or Processors could be ANY entity incorporated in DIFC that either i) alone or jointly with others determines the purposes and means of the Processing of Personal Data (“Controller”) or ii) Processes Personal Data on behalf of a Controller (“Processor”, including Sub-processors). Please review Schedule 1, Article 3 of the DP Law 2020 for further definition details.

Are you a Controller or Processor incorporated elsewhere that Processes Personal Data in the DIFC or for a DIFC entity as part of a contractual arrangement, agreement, internal group structure or other similar stable arrangements, including such arrangements that require processing resulting in transfers of Personal Data outside the DIFC?

Is any of the Processing of Personal Data conducted by natural persons in the course of a purely personal or household activity that has no connection to a commercial purpose?