Dubai and DIFC to Host 2026 Global Privacy Assembly
The Global Privacy Assembly (GPA) has announced that Dubai International Financial Centre (DIFC) will host its prestigious 2026 conference. This selection underscores DIFC’s leadership in data protection and privacy regulation within the Middle East, Africa, and South Asia (MEASA) region.
Established in 1979, the GPA serves as the foremost global forum for data protection authorities, fostering international cooperation and upholding information rights in the public interest. The Assembly comprises leading global Information and Privacy Authorities and Commissioners, working to enhance transparency in public bodies while ensuring data privacy for individuals.
DIFC’s recognition as the host of GPA 2026 reflects its commitment to robust data protection measures, upheld by the DIFC Data Protection Law (DIFC Law No. 5 of 2020). As a key jurisdiction facilitating secure cross-border data flows, DIFC ensures that businesses operate within ethical and responsible data management frameworks, earning the trust of global stakeholders.
Hosting the GPA in 2026 will reinforce DIFC’s role as a global leader in privacy governance, regulatory excellence, and international cooperation. Additionally, DIFC will secure a position on the GPA Executive Committee, further strengthening its influence in shaping global privacy policies. The conference will welcome private sector participants, including technology firms, consultants, legal professionals, and NGOs, alongside data protection authorities and GPA members.
His Excellency Essa Kazim, Governor of DIFC, remarked: "DIFC has set a benchmark for privacy and data protection regulation in the region and is now gaining global recognition. Hosting the Global Privacy Assembly in 2026 will provide an opportunity to showcase our world-class standards and foster international collaboration."
The previous GPA was hosted in 2024 by the Jersey Office of the Information Commissioner. Paul Vane, Jersey’s Information Commissioner, along with the GPA Executive Committee, expressed confidence in DIFC’s ability to deliver a comprehensive and impactful event.
DIFC continues to enhance its legal and regulatory framework in line with international best practices. Recent amendments to Data Protection Regulations address ethical management of personal data, with the introduction of Regulation 10—a pioneering framework governing the processing of personal data via autonomous and semi-autonomous systems. Furthermore, the newly introduced Digital Assets Law and Law of Security provide a legal foundation for digital asset ownership, control, and transactions.
Securing the Global Privacy Assembly adds to DIFC’s recent milestones, including joining the Global Cooperation Arrangement for Privacy Enforcement (CAPE) and gaining Associate Membership in the Global Cross Border Privacy Rules (CBPR) Forum.
