UAE Federal Decree-Law No. 45 of 2021
Know where you stand on the UAE PDPL in 10 minutes.
Answer 30 plain-language questions. Get a free readiness score. Subscribe for the ranked gap report, eight compliance documents already filled in for your business, and a dashboard that tracks your progress.
Why now
Clients are asking
Procurement questionnaires from enterprises, banks and government now include PDPL questions. A missing privacy notice or breach procedure can stall a deal.
The window will be short
When the Executive Regulations are published, the law gives a limited adjustment period. Starting from zero at that point is expensive.
GDPR templates don't fit
The PDPL has no 'legitimate interests' ground and its own transfer rules. Copied EU policies misstate your legal basis.
What you get
Eight editable Word documents, generated from your answers and kept up to date as you reassess.
00
Gap assessment report
Score per area, every gap ranked by severity with the article it comes from, and a 30/60/90-day roadmap.
01
Privacy notice
Written for the PDPL, not copied from the GDPR. Pre-filled with your purposes, providers and legal grounds.
02
Record of processing activities
The register Arts. 7 and 8 require, already populated with the activities your answers describe.
03
Data subject request procedure
Step-by-step handling of access, erasure and objection requests, with five reply templates and a log.
04
Breach response procedure
Who does what in the first hours, the Art. 9 notification content, a customer notice and a tabletop exercise.
05
Data processing agreement
For vendors that don't offer their own terms, including a clause for transfers outside the UAE.
06
Impact assessment (DPIA)
Pre-filled for the high-risk processing we detect: AI chatbots, CCTV, biometrics, profiling.
07
Retention schedule
Suggested periods per record type, disposal rules and a deletion log.
How it works
- 1
Answer
30 questions about the data you hold, your vendors, security and processes. About 10 minutes.
- 2
See your score
Free: overall readiness, a score for each of 12 areas, and how many gaps of each severity you have.
- 3
Fix and track
Subscribe (€39/month) for every finding with the fix, all eight documents pre-filled for your business, and progress tracking as you improve.
Questions
+Does the PDPL apply to my business?
If you are licensed on the UAE mainland or in a free zone other than DIFC and ADGM, almost certainly yes. It also applies to businesses abroad that process data of people in the UAE. DIFC and ADGM have their own laws; the assessment tells you if you are out of scope before you pay.
+Isn't the law not enforced yet?
The law has been in force since January 2022. Its Executive Regulations and the penalty schedule are still pending, and once they are published organisations get a short adjustment period (Art. 29). Meanwhile, enterprise clients, banks and government entities already ask suppliers to show PDPL compliance during onboarding.
+Is this legal advice?
No. It is a structured self-assessment and a set of templates generated from your answers. It gets you most of the way at a fraction of a consultant's fee. For high-risk processing we recommend having the documents reviewed by a UAE-qualified lawyer.
+Who can buy?
The free assessment is open to anyone. Subscriptions are for VAT-registered businesses: you will need your 15-digit UAE TRN. We invoice from Estonia with VAT under the reverse-charge mechanism.
+What format are the documents?
Editable Word (.docx) files, regenerated from your latest assessment whenever you download them. Fields you must complete are highlighted in yellow.
Built by a cybersecurity firm, not a template shop
Parendum runs penetration tests and security audits. The kit reflects what actually goes wrong in breaches, not just what the law says on paper.
Get your free score