COMPLIANCE
UAE PDPL compliance.
Last reviewed · March 22, 2026Audit cycle · annual surveillanceDocument · /compliance/pdpl-uae
Overview
Federal Decree-Law No. 45 of 2021 (UAE PDPL) governs the processing of personal data of individuals in the UAE. BroadNet complies with all requirements: lawful basis, data subject rights, breach notification, cross-border transfer restrictions, and DPO designation.
§01
Definitions
Audit and compliance terminology referenced on this page is defined below. Where definitions diverge from a specific framework, the framework standard prevails for that attestation.
Quick reference
- Scope statement
- The systems, processes, and locations covered by the attestation. Out-of-scope items are explicitly excluded.
- Surveillance audit
- Annual reassessment between full certification cycles to confirm controls remain effective.
- Type I vs Type II
- Type I attests to control design at a point in time. Type II attests to operating effectiveness over a period.
- Bridge letter
- Auditor confirmation that no material changes have occurred between the end of the audit period and the letter date.
Questions?
Questions on this attestation, scope, or certificate verification? Our legal and security teams co-own compliance correspondence.
legal@broadnet.meBroadNet Technologies Sarl · Dubai, UAE · Operating since 2003
Related documents