A9 AdvisoryData Privacy and Protection
UAE PDPL, GDPR and privacy programmes that work. We build privacy programmes that meet UAE PDPL, GDPR and sector requirements: data mapping, records of processing, DPIAs, data subject rights and breach response.
The Challenge
Organisations hold more personal data than they realise, in more places. New laws bring rights, deadlines and breach notification duties that existing processes were not built for.
How We Help
We build privacy programmes that meet UAE PDPL, GDPR and sector requirements: data mapping, records of processing, DPIAs, data subject rights and breach response.
Our GRC specialists have more than 15 years of experience with UAE government entities and private sector organisations across the region, and hold certifications including CISA, CRISC, ISO 27001, ISO 22301, ISO 42001 and ISO 27701. We also build Arbor GRC, our own platform for running these programmes.
What We Deliver
Privacy Gap Assessment
Your position against UAE PDPL, GDPR and other applicable laws.
Data Mapping
Where personal data lives, why and who can access it.
Records of Processing and DPIAs
Documentation regulators expect to see.
Data Subject Rights
Processes to handle requests within legal deadlines.
Privacy by Design
Privacy built into new systems and projects.
DPO Support
Experienced support for your data protection officer.
What You Can Expect
- Clear visibility of personal data
- Requests answered on time
- Lower risk of fines and reputational harm
How We Work
Assess
Understand your obligations, risks and current state.
Design
Build the framework, policies, controls and governance.
Embed
Train owners and run the first cycle alongside them.
Assure
Audit, report and prepare for regulators and certification.
Standards and Frameworks
Frequently Asked Questions
Does UAE PDPL apply to us?
It generally applies to processing of personal data in the UAE, with exceptions such as some free zones that have their own data protection laws. We assess which laws apply to you.
Can you act as our DPO?
We can support your appointed DPO with expertise and capacity.
Often Combined with
Regulatory Compliance
UAE IA, Dubai ISR, ADHICS, NCEMA 7000 and sector regulations.
Governance, Risk and ComplianceISO Certification Readiness
ISO 27001, 22301, 42001, 27701, 20000 and 9001.
Governance, Risk and ComplianceEnterprise Risk Management
Link risk to strategy and make better decisions.
Talk to an Adviser
Tell us what you are working on and we will bring the right specialists to the conversation. We reply within one working day.