Data Protection & Privacy
With data-related disputes increasing, as well as new issues brought by the increasing use of AI, the accompanying threats to businesses have grown exponentially. Our experts guide clients through the maze of regulatory, litigation, and arbitration procedures required to navigate this fast-changing area.
Data protection and privacy is an ever-evolving field of law. Our team of experts have specific expertise in this area, and they take a pragmatic and risk-based approach based on current local and international legislation. We focus on strategy and how to best protect our clients’ interests in any contentious matters and subsequent enforcement process, and where necessary, we assist with appeals in relation to regulatory investigations and/or before the local or federal courts.
We support clients across all the issues they encounter, ranging from data breaches and investigations, to defending or appealing a regulatory enforcement action, or managing individual claims brought after or alongside regulatory action. In relation to litigation, we act for clients across the full spectrum of data privacy disputes, from allegations of unlawful processing through to claims arising out of data breaches or theft.
Key Contacts
Representative Experience
- A multi-national insurance broker on a dispute with a former top executive. The matter includes complex elements of fraud and parallel investigations of the Dubai Public Prosecutor and the DIFC Data Protection Authority.
- An international corporate entity on a range of compliance issues, notably local law data protection compliance, including breach notification obligations across the Middle East.
- A GCC bank on an investigation by the Central Bank of the UAE regarding a major data breach, resulting in claims that the bank had violated local cyber security regulations.
- A UAE national airline on regulatory and compliance processes and procedures in the UAE in relation to the storing and sharing data, data security and transfer or refunding of money across borders to ensure our client aligned with UAE and international standards.
- A Korean technology giant on a criminal investigation whereby an employee leaked information to competitors under Article 120 of the UAE Labour Law.
- A private individual in relation to a cryptocurrency and cybercrime case whereby our client put USD 20 million into an account with a registered company who then refused to release the funds on request.
- A major UAE-based private corporate entity on their compliance with obligations imposed by federal laws and resolutions, including global data protection laws.
- A large European tech company on its entry into the UAE and MENA market, including strategic data protection and cybersecurity.
- A UAE federal government entity compliance with obligations imposed by federal laws and resolutions, including specific requirements and notices relevant to their operations under local law and data protection requirements.
- A UAE corporate client on data protection and privacy issues in relation to a joint-venture relationship with a Chinese-based counterpart, including the transfer of data and compliance issues.