Dubai International Financial Centre (DIFC) has updated key regulations under the DIFC Laws Amendment Law, Law No. 1 of 2025, which came into force on 15 July 2025.
The changes include significant updates to the Data Protection Law, notably the introduction of a Private Right of Action through the DIFC Courts. This strengthens the legal options available to individuals whose personal data has been mishandled.
Clarifications have also been made regarding the law’s applicability, including its extraterritorial reach, to ensure greater regulatory certainty.
Amendments to Article 28 on Data Sharing now offer clearer guidance on assessing whether foreign jurisdictions are suitable for the transfer of personal data based on adequacy criteria.
Further clarifications have been applied to laws governing Security, Insolvency, and Employment to enhance legal clarity across the DIFC framework.
The Amendment Law was officially enacted on 8 July 2025 and became effective a week later, on 15 July 2025.
All revised laws are accessible via DIFC’s official legal database for public and institutional reference.
As one of the world’s most advanced financial centres, DIFC remains the primary financial hub for the Middle East, Africa, and South Asia (MEASA) region, spanning 77 countries with a combined population of 3.7 billion and an estimated GDP of USD 10.5 trillion.

