DIFC is a top priority for UK data transfer “adequacy” status

In a significant step concerning the international flow of data in the Middle East, the DIFC announced on 26 August that it has formally engaged with the UK’s Department for Digital, Culture, Media & Sport Department (DCMS) regarding an “adequacy” assessment in respect of data transfers from the UK to the Dubai International Financial Centre (DIFC).

Background

Following the UK’s departure from the EU, it is now able to independently grant adequacy status to its international partners. Data adequacy is a status granted by the UK to countries which provide high standards of protection for personal data. Once granted, an adequacy determination allows personal data to be transferred from the UK to the respective country freely, in accordance with the terms of the relevant adequacy decision. This removes the need for UK organisations to use alternative transfer mechanisms, which can be costly and burdensome to implement and administer.

The DCMS has now identified 6 “top priority” destinations for adequacy – the DIFC being the only such destination in the Middle East.

What this means for the DIFC

The decision to include the DIFC as a “top priority” destination is a strong endorsement of the DIFC’s legislative, administrative and executive efforts around the promotion and enablement of modern innovative businesses in a manner with due regard to personal data.

If granted, the adequacy status will put in place a lasting framework for secure, ethical data-sharing and remove barriers to the cross-border flow of data from the UK to the DIFC. The decision will also further enhance the strong reputation of the DIFC and give individuals and organisations greater confidence in the maturity and sophistication of the DIFC’s practices around data, which are already some of the most advanced in the region.

In an increasingly hyper-connected word where data transfers are the lifeblood of economies, an adequacy decision will be an important milestone in the region. The UK’s final adequacy decision will be made in due course once the DCMS’ thorough assessment process is complete.

Lawful international data transfer has become one of the biggest challenges for multinationals. If you require support with your international data transfers, then please contact us about “CtrlTransfer”, our data transfer tool used by many leading multinationals to enable the effective and swift risk assessment of cross-border data transfers.

For more information, please contact one of our team listed on the right hand panel of this page or email products@simmons-simmons.com.