On 20 September 2021, the United Arab Emirates (“UAE”) issued a new data protection law, Federal Decree-Law No. 45/2021 (“DP Law”). This long-awaited development is in line with wider international practices in protecting the privacy of individuals and personal data. Prior, the UAE did not have a comprehensive data protection law at its federal level. This legal briefing shall provide an overview of the most notable features of the DP Law as well as the impact on UAE based businesses.