The PDPL is the UAE's first comprehensive federal data protection law, issued in 2021 and in force from 2 January 2022. It sets a consent-based framework with controller and processor obligations, data subject rights, and rules on cross-border transfers. It applies across the UAE except in financial free zones such as DIFC and ADGM.