5. What is ADGM’s Data Protection Regime?

5.1 ADGM’s data protection regime consists of the ADGM Data Protection Regulations 2015 (as amended) (the “Data Protection Regulations”).
5.2 The Data Protection Regulations were enacted on October 4, 2015 by the Board of Directors of the ADGM, in exercise of its powers under Article 6(1) of Law No. 4 of 2013 concerning the ADGM (issued by His Highness the Ruler of the Emirate of Abu Dhabi). The Data Protection Regulations make provision for the protection of personal data within the ADGM and for connected purposes. The Data Protection Regulations was amended in 2018 to include updates on matters such as defined terms, data breach notification timeframes and deadlines for notifications to the Registrar, alongside expanded enforcement provisions.
5.3 The Data Protection Regulations control how personal information is used by organisations and businesses registered in ADGM. All entities registered in ADGM that hold or process Personal Data must follow the obligations under the Data Protection Regulations.