Jurisdiction dossier
Binding AI rules in the DIFC free zone; the federal level is the non-binding AI Charter. 1 obligation tracked — 1 in force.
Binding AI rules in the DIFC free zone; the federal level is the non-binding AI Charter.
checked 24 Jun 2026 primary source ↗
Binds Controllers / operators deploying autonomous or AI systems processing personal data in the DIFC. Binding rules for autonomous / AI systems processing personal data in the DIFC; high-risk needs certification or an Autonomous Systems Officer.
DIFC free-zone scope; enforcement from early 2026.
Stated maximum penalty — DIFC data-protection fines
DIFC Data Protection Regulation 10 is already in force, with obligations live since January 1, 2026. Binding AI rules in the DIFC free zone; the federal level is the non-binding AI Charter.
Current obligations bind, among others, Controllers / operators deploying autonomous or AI systems processing personal data in the DIFC. Scope and thresholds vary per instrument — see each row's source for the legal text.
Stated statutory maxima include: DIFC Regulation 10 — DIFC data-protection fines. These are the maximum amounts in the instruments; actual enforcement is at the regulator's discretion.
Not legal advice. Each obligation links to its primary source and carries the date it was last checked; verify the legal text before relying on it.