New rules in UAE to protect sensitive personal information
The Abu Dhabi Global Market (ADGM) has announced new rules under its Data Protection Regulations 2021 aimed at strengthening safeguards for sensitive personal information, particularly in sectors such as insurance and education.
The Data Protection Regulations (Substantial Public Interest Conditions) Rules 2025 allow organisations to process specific types of personal data without individual consent when it serves a substantial public interest — for example, protecting children or vulnerable adults.
Key provisions of the new rules
-
Insurance use: Companies can process sensitive data for insurance purposes if it provides clear public benefit.
-
Clear definitions: Terms such as “insurance contract” and “insurance purpose” have been formally defined for consistency.
-
Protection for at-risk individuals: Guidance specifies when children or adults may be considered “at risk” and how their data should be handled responsibly.
-
Safeguards: Strong conditions ensure personal information is used only when necessary, with protections for vulnerable groups.
Rashed Al Blooshi, CEO of ADGM Registration Authority, said:
“ADGM’s data protection framework is built on accountability, transparency, and public trust. These new rules strengthen protection for vulnerable individuals while allowing responsible data use across key sectors.”
The regulatory update also supports ADGM’s expansion across areas like Al Reem Island, aligning with international standards while ensuring safety, trust, and efficiency in data handling.
With these measures, ADGM seeks to reassure residents and businesses that sensitive information will be protected, while enabling essential services to operate effectively.
