• Facilitates personal data transfers between DIFC and California-based entities in accordance with the DP Law 2020 while protecting consumers
  • This move sees the DIFC setting a precedent not only with respect to traditional adequacy determinations issued to date, but for building similar relationships with various US states and the US privacy framework in the future

Dubai, UAE: The Commissioner of Data Protection of the Dubai International Financial Centre (DIFC), the leading global financial centre in the Middle East, Africa and South Asia (MEASA) region, has issued a first of its kind adequacy decision regarding the California Consumer Privacy Act of 2018, a standalone data protection law (CCPA). The CCPA was amended by the California Privacy Rights Act of 2020 (CPRA) which took effect on 1 January 2023 (together ‘Amended CCPA’). The decision establishes a determination of the Amended CCPA’s equivalence with the Data Protection Law, DIFC Law No. 5 of 2020 (DP Law 2020). 

The decision, which is in line with DIFC’s commitment to drive privacy and data protection by continuously strengthening its knowledge of cross-border enforcement best practices, facilitates personal data transfers between DIFC and California-based entities in accordance with the DP Law 2020, without having to apply additional contractual measures. It also sees DIFC setting a first-time precedent for building similar relationships with various US states.

The DIFC Commissioner’s Office recognises the Amended CCPA and the California Privacy Protection Agency (CPPA) as an international organisation ensuring adequate data protection for purposes of personal data processed and transferred by the entities that it supervises. 

The Amended CCPA gives consumers control and protection over personal data collected by businesses with built-in methods for confining data collection and processing to what is fair and lawful, and necessary, in adherence with global data protection standards as well as the Commissioner’s objectives in administering the DP Law 2020.

Jacques Visser, DIFC Commissioner of Data Protection, said: “The importance of additional safeguards for imported personal data is evidenced by the factors set out in published adequacy protocols as well as the DIFC Ethical Data Management Risk Index (EDMRI) and due diligence tool. In evaluating California’s privacy law and regulations, together with implementation, enforcement and other holistic factors, it became clear that in large part, California importers will treat personal data from DIFC ethically and fairly.”

Ashkan Soltani, Executive Director of the California Privacy Protection Agency, added: “We're pleased to be recognised by DIFC. California is set to become the world's 4th largest economy and is the de-facto leader in privacy in the US. This decision further demonstrates the incredible potential created by having strong consumer protections that facilitate responsible trade and innovation.”

The DIFC Commissioner’s Office looks forward to working with the CPPA and the California Office of the Attorney General, which shares enforcement of the CCPA with the CPPA.

-Ends-

About Dubai International Financial Centre

Dubai International Financial Centre (DIFC) is one of the world’s most advanced financial centres, and the leading financial hub for the Middle East, Africa and South Asia (MEASA), which comprises 72 countries with an approximate population of 3 billion and an estimated GDP of USD 8 trillion.

With a close to 20-year track record of facilitating trade and investment flows across the MEASA region, the Centre connects these fast-growing markets with the economies of Asia, Europe and the Americas through Dubai. 

DIFC is home to an internationally recognised, independent regulator and a proven judicial system with an English common law framework, as well as the region’s largest financial ecosystem of over 39,000 professionals working across over 4,900 active registered companies – making up the largest and most diverse pool of industry talent in the region. 

The Centre’s vision is to drive the future of finance through cutting-edge technology, innovation, and partnerships. Today, it is the global future of finance and innovation hub offering one of the region’s most comprehensive FinTech and venture capital environments, including cost-effective licensing solutions, fit-for-purpose regulation, innovative accelerator programmes, and funding for growth-stage start-ups.  

Comprising a variety of world-renowned retail and dining venues, a dynamic art and culture scene, residential apartments, hotels and public spaces, DIFC continues to be one of Dubai’s most sought-after business and lifestyle destinations. 

For further information, please visit our website: difc.ae, or follow us on LinkedIn and Twitter @DIFC. 

For media enquiries, please contact:   
Omar Nasro
ASDA’A BCW
omar.nasro@bcw-global.com  

Rasha Mezher | Dubai International Financial Centre Authority  
Consultant, Marketing & Corporate Communications
t-rasha.mezher@difc.ae