Dubai International Financial Centre has opened public consultation on proposed amendments to its Data Protection Regulations (DIFC Law No. 5/2020 on Data Protection Law), aiming to strengthen governance of personal data in AI‑driven systems.
The DIFC Authority announced that the amendments are designed to enhance accountability and safety in systems processing personal data, particularly in an AI‑native jurisdiction. The proposals include clarifying certification obligations, defining the role of the Autonomous Systems Officer, and granting the Commissioner new powers to recognise accreditation and certification schemes.
Jacques Visser, Chief Legal Officer at DIFC Authority, stated that the consultation seeks to ensure the regulatory framework remains practical and responsive to evolving technologies, while maintaining high standards of governance.
The Data Protection Regulations were last updated in 2023 to introduce safeguards for advanced AI‑enabled systems. Building on that foundation, the new proposals refine Regulation 10 to strengthen expectations around privacy‑by‑design and ethical development, and introduce Regulation 11 to empower recognition of certification frameworks.
Consultation Paper No. 3/2026 sets out the details of the proposed changes. The consultation period will run for 30 days, with comments accepted until 18 July 2026.
For the full story, click here.