Duty LXD-1639
Makes high-risk automated decisions, in the United Arab Emirates
DIFC Data Protection Law, comprehensive regimesince 1 line
DIFC Law No. 5 of 2020 · Read the law's page
- An app whose Controller or Processor is incorporated in the DIFC, or that Processes Personal Data in the DIFC as part of stable arrangements, must have a lawful basis under Article 10 for Processing Personal Data, and must obtain the Data Subject's explicit consent or satisfy another condition in Article 11 before Processing a faceprint, voiceprint, or other biometric identifier used to uniquely identify a natural person, including one derived from a photo, video, or audio recording.
DIFC Regulation 10 on Personal Data Processed through Autonomous and Semi-Autonomous Systemssince 4 lines
DIFC Data Protection Regulations, Regulation 10 (enacted September 2023)
- Conduct an AI impact assessment for autonomous or semi-autonomous systems that process personal data.
- Provide transparency about AI-driven decisions.
- Document high-risk use of autonomous or semi-autonomous systems that process personal data.
- Obtain certification for High Risk Processing Activities.
Consumer Protection Standards: reasons for rejecting an application or reducing credit, and complaint decisionsin force5 lines
CBUAE Consumer Protection Standards (N 1158/2021) · Read the law's page
- It reaches you if you are a Licensed Financial Institution, meaning a bank or other financial institution licensed by the Central Bank of the UAE under Decretal Federal Law 14 of 2018 to carry on a licensed financial activity, and you provide Financial Products and/or Services to Consumers who are Natural Persons or Sole Proprietorships (Regulation, Scope of Application and Article 1; Standards, Introduction): when you reject a Consumer's application for a Financial Product and/or Service, disclose the reason for the rejection to the applicant, except where the reason is related to Financial Crime Compliance risks or as may be prohibited by law (Standard 2.1.1.26).
- When you decrease the credit limit on a card or close the card for business reasons, provide the Consumer with a notice and the reason for the limit decrease or closure (Standard 7.1.3.6).
- Ensure that a written response is provided to the Consumer on your decision regarding a Complaint, including full and complete reasons for the decision, subject to lawful obligations (Standard 8.1.1.4(e)).
- When a Consumer has verbally expressed dissatisfaction with a Financial Product and/or Service and frontline staff cannot resolve the matter to the Consumer's satisfaction, inform the Consumer of the right to file a written Complaint through your Complaint management process (Standard 8.1.2.1).
- Have in place a Consumer Complaint Management function situated in the UAE that is independent of the management of Retail Operations and monitors and reports the timed performance of the Complaint process quarterly to Senior Management (Standards 8.1.1.1, 8.1.1.2 and 8.1.1.4(g)).