Skip to content

Regulation Tracker / Gulf states

DIFC Data Protection Regulations, Regulation 10 — Processing Personal Data through Autonomous and Semi-autonomous Systems

Dubai International Financial Centre Authority / Commissioner of Data Protection · Dubai International Financial Centre

last revised 2023-09-01last verified 2026-09-041 versioncountry page →

RegulationIn forceDisclosureRecord-keepingRisk classificationClient consent

map categories:Data protection and legal AIVendor due diligenceHorizontal AI statute

Regulation 10 of the DIFC Data Protection Regulations, in force 1 September 2023, is the first instrument in the Middle East, Africa and South Asia to govern personal data processed through autonomous and semi-autonomous systems, including generative AI. It sets behavioural boundaries for entities that deploy or operate such systems rather than regulating algorithms directly.

Applies to
firms, providers, all
Effective
See version history
Current version
Enacted · 01 Sept 2023
Last verified
04 Sept 2026
Official text
www.difc.com/business/registrars-and-commissioners/commissioner-of-dat…

What the document requires

  • Applies to entities that deploy or operate autonomous and semi-autonomous systems, including AI and generative machine-learning tools, to process personal data in the DIFC.
  • Requires clear notices, transparency and accountability in AI design and deployment.
  • Requires systems to process data for human-defined purposes, with audit and certification obligations.
  • Supplements, and is enforced alongside, the DIFC Data Protection Law.

Version history

VersionDateWhat changedSource
Enactedcurrent2023-09-01Added to the DIFC Data Protection Regulations, in force 1 September 2023.official

Sources

Cite this record

SafeLegalAI Legal AI Regulation Tracker, "DIFC Data Protection Regulations, Regulation 10 — Processing Personal Data through Autonomous and Semi-autonomous Systems" (Dubai International Financial Centre Authority / Commissioner of Data Protection, Enacted, 2023-09-01), safelegalai.com/regulation/gulf/ae-difc-data-protection-regulation-10 (accessed 2026-09-04). Data: CC BY 4.0.

More official documents in Gulf states