DIFC Enacts Amended Data Protection Regulations (AI and Autonomous Systems)

Following the June-July 2026 consultation, DIFC enacted amendments to the Data Protection Regulations strengthening AI-system safeguards under Regulation 10 and adding Regulation 11 (Commissioner power to recognize AI accreditation/certification schemes). LOW CONFIDENCE ON DATE: the exact enactment date could not be independently confirmed via direct DIFC source fetch in this research pass (WebFetch access to difc.com was blocked/rate-limited); the date shown is a best estimate based on the 30-day consultation closing 18 July 2026 plus typical DIFC enactment lag seen in other 2026 items. Compliance teams should verify the precise in-force date against DIFC's Legal Database or the cited DIFC news page directly.

What firms should do

Yes — review AI/data-processing governance against the finalized Regulation 10/11 requirements

Regulator: DIFC Registrar of Companies
Type: Regulations Amendment
Status: Enacted/In Force
Published: 15 Aug 2026
Takes effect: 15 Aug 2026
Topic: Data Protection
Impact: High

Read it on the regulator's website

Found automatically on the regulator's website and summarised by AI by Arakan Lexara. Not legal advice; check the official source before relying on it.

Arakan Lexara Weekly

Get the week's UAE regulatory changes every Monday.

Key developments, what firms are asked to do and the deadlines ahead. Free.

More from the DIFC Registrar of Companies

18 Jun 2026Consultation PaperHigh impact

Proposed Amendments to DIFC Data Protection Regulations - AI and Autonomous Systems (Regulation 10 and new Regulation 11)

DIFC proposed strengthening Regulation 10 (safe, ethical, privacy-by-design development of AI/autonomous systems processing personal data) and introducing a new Regulation 11 empowering the Commissioner of Data Protection to recognize AI accreditation and certification schemes, alongside clarifying the responsibilities of the Autonomous Systems Officer (ASO). No formal consultation paper number was disclosed in secondary sources reviewed.

17 Jun 2026Consultation PaperMedium impact

Proposed Amendments to DIFC Arbitration Law (re-titled 'Arbitration and Mediation Law')

DIFC proposed a major overhaul of DIFC Law No. 1 of 2008 (Arbitration Law), re-titling it the 'Arbitration and Mediation Law' and introducing formal recognition of electronic communications, asymmetrical arbitration agreements, tribunal power to order security for costs and issue summary awards, third-party funding disclosure duties, an emergency arbitrator framework for urgent pre-tribunal relief, and a new mediation section governing the DIFC Mediation Centre. Publication date reported variously as 17-18 June 2026 across secondary sources.

30 Apr 2026Consultation PaperHigh impact

Proposed Amendments to the Prescribed Company Regulations

DIFC proposed removing qualifying-purpose restrictions on Prescribed Companies (broadening eligibility beyond aviation, maritime and IP-holding structures), mandating appointment of a Corporate Service Provider for most Prescribed Companies (with limited 'Exempt PC' carve-outs for government-, listed- or regulated-entity-controlled companies) with a 6-month compliance window and fines up to USD 100,000 for failing to provide CSPs required documents, expanding permitted asset-holding for funds/family offices, and tightening the prohibition on Prescribed Companies directly employing staff.

9 Feb 2026Regulations AmendmentMedium impact

Variable Capital Company Regulations 2026

DIFC enacted new Variable Capital Company (VCC) Regulations, establishing the UAE's first open-ended umbrella fund vehicle with legally segregated sub-funds/portfolios, following a 2025 public consultation (initial draft consulted on 2 July - 24 July 2025). Fund managers and family offices can now use the VCC structure for open-ended investment vehicles, subject to new registration, governance and asset-segregation requirements.