Privacy and AI governance guides
Plain, practical explanations of the regimes our clients deal with across the Gulf and Europe. Each guide covers what the law asks for, where organisations most often fall short, and the order we would tackle the work in.
UAE PDPL
Scope, lawful basis, rights, breach handling and transfers under Federal Decree Law No. 45 of 2021.
Read the guideRegulatory guidePDPL Saudi Arabia
Scope, legitimate interest, transfer rules, breach reporting and DPO expectations under PDPL Saudi Arabia.
Read the guideRegulatory guideDIFC and ADGM
How the two financial free zone regimes differ from the federal law, and what each commissioner expects.
Read the guideRegulatory guideGDPR in the Gulf
Extraterritorial triggers, representatives, transfers and how GDPR interacts with GCC privacy laws.
Read the guideGovernance guideAI governance
Inventory, risk classification, EU AI Act obligations by tier, and the controls that make AI use defensible.
Read the guideDubai and DIFCData privacy in Dubai and DIFC
Which law applies to your Dubai business, what the DIFC Commissioner expects, and where to start.
Read the guideRegulatory guideDIFC Regulation 10
Deployer liability, high risk certification, the Autonomous Systems Officer and the systems register under DIFC Regulation 10.
Read the guide