Duty LXD-2485
Makes employment decisions, in the United Arab Emirates
DIFC Data Protection Law, comprehensive regimesince 1 line
DIFC Law No. 5 of 2020 · Read the law's page
- An app whose Controller or Processor is incorporated in the DIFC, or that Processes Personal Data in the DIFC as part of stable arrangements, must have a lawful basis under Article 10 for Processing Personal Data, and must obtain the Data Subject's explicit consent or satisfy another condition in Article 11 before Processing a faceprint, voiceprint, or other biometric identifier used to uniquely identify a natural person, including one derived from a photo, video, or audio recording.
DIFC Regulation 10 on Personal Data Processed through Autonomous and Semi-Autonomous Systemssince 4 lines
DIFC Data Protection Regulations, Regulation 10 (enacted September 2023)
- Conduct an AI impact assessment for autonomous or semi-autonomous systems that process personal data.
- Provide transparency about AI-driven decisions.
- Document high-risk use of autonomous or semi-autonomous systems that process personal data.
- Obtain certification for High Risk Processing Activities.