# UAE PDPL compliance.

- Canonical URL: https://www.broadnet.me/compliance/pdpl-uae
- Language: en
- Publisher: BroadNet (https://www.broadnet.me)
- Markdown version of the page above, generated from the rendered page.

COMPLIANCE

Last reviewed · March 22, 2026 Audit cycle · annual surveillance Document · /compliance/pdpl-uae

On this page

Verify the certificate

Audit letters, certificate copies, and bridge letters available to evaluators under NDA.

[Request evidence](mailto:legal@broadnet.me)

## Overview

Federal Decree-Law No. 45 of 2021 (UAE PDPL) governs the processing of personal data of individuals in the UAE. BroadNet complies with all requirements: lawful basis, data subject rights, breach notification, cross-border transfer restrictions, and DPO designation.

§01

## Definitions

Audit and compliance terminology referenced on this page is defined below. Where definitions diverge from a specific framework, the framework standard prevails for that attestation.

Quick reference

**Scope statement**

The systems, processes, and locations covered by the attestation. Out-of-scope items are explicitly excluded.

**Surveillance audit**

Annual reassessment between full certification cycles to confirm controls remain effective.

**Type I vs Type II**

Type I attests to control design at a point in time. Type II attests to operating effectiveness over a period.

**Bridge letter**

Auditor confirmation that no material changes have occurred between the end of the audit period and the letter date.

## Questions?

Questions on this attestation, scope, or certificate verification? Our legal and security teams co-own compliance correspondence.

[legal@broadnet.me](mailto:legal@broadnet.me)

BroadNet Technologies Sarl · Dubai, UAE · Operating since 2003

Related documents

## Continue reading

[All trust documents](https://www.broadnet.me/trust)

[Document Regulations · UAE](https://www.broadnet.me/regulations/uae)