Release Of Information Template for the United Arab Emirates
Generate a bespoke document
What is a Release Of Information?
The Release of Information Template serves as a critical document in the UAE's regulatory landscape, where strict data protection laws govern the sharing and handling of personal and business information. This template is essential for organizations needing to facilitate the lawful disclosure of information while maintaining compliance with Federal Decree Law No. 45 of 2021 and related regulations. It is designed for use across various scenarios, from healthcare record transfers to financial information sharing, incorporating necessary safeguards and consent mechanisms. The template addresses both domestic and international information transfers, considering the UAE's position as a global business hub, and includes provisions for electronic processing and storage of information in line with cybersecurity requirements.
Trusted by high-performance teams
Frequently Asked Questions
Is a Release of Information document legally binding in the United Arab Emirates?
Yes, a properly executed Release of Information document is legally binding in the UAE under Federal Decree Law No. 45 of 2021 on Personal Data Protection. The document creates enforceable obligations for data controllers and processors when transferring personal information. It must include specific consent requirements and comply with UAE cybersecurity regulations to maintain its legal validity.
How does a Release of Information differ from a Non-Disclosure Agreement in UAE law?
A Release of Information authorizes the disclosure of specific data under UAE data protection laws, while an NDA restricts information sharing to prevent unauthorized disclosure. The Release focuses on obtaining proper consent for data transfer under Federal Decree Law No. 45 of 2021, whereas NDAs establish confidentiality obligations. Both documents serve opposite purposes in managing information flow and legal liability.
Can UAE authorities reject a Release of Information document if it's incomplete?
Yes, UAE regulatory bodies can reject incomplete Release of Information documents that fail to meet Federal Decree Law No. 45 of 2021 requirements. Missing elements like proper data subject consent, purpose limitations, or recipient identification can invalidate the release. Healthcare, financial, and government sectors have additional compliance requirements that must be fully documented to avoid regulatory penalties.
How long does it take to create a valid Release of Information document in the UAE?
A basic Release of Information form can be prepared in 1-2 days using standard templates for routine disclosures. Complex arrangements involving cross-border data transfers or multiple parties may require 1-2 weeks for proper legal review and compliance verification. Healthcare and financial sector releases often need additional time to meet specific regulatory requirements under UAE law.
Must a Release of Information include specific UAE data protection requirements?
Yes, UAE Release of Information documents must comply with Federal Decree Law No. 45 of 2021 requirements including explicit consent, purpose specification, data minimization principles, and retention periods. The document must identify the data controller, processor, and recipients, plus include data subject rights notifications. Cross-border transfers require additional adequacy assessments and safeguards under UAE cybersecurity regulations.
Which common mistakes invalidate Release of Information documents in the UAE?
Common mistakes include failing to obtain explicit written consent as required by Federal Decree Law No. 45 of 2021, using overly broad language that violates data minimization principles, and omitting mandatory data subject rights notifications. Other errors include missing Arabic translations where required, inadequate purpose specifications, and failing to include proper retention and deletion timelines for the released information.
Can healthcare providers in the UAE use generic Release of Information forms?
Healthcare providers should use UAE-specific forms that comply with both Federal Decree Law No. 45 of 2021 and healthcare sector regulations from the Ministry of Health and Prevention. Generic international forms often lack required Arabic language provisions and UAE-specific consent mechanisms. Healthcare releases must include patient rights notifications and comply with medical confidentiality requirements under UAE healthcare laws.
About the Release Of Information
A Release of Information document is a legal agreement that authorizes the controlled disclosure of personal, medical, financial, or business information under United Arab Emirates law. This document protects all parties involved by establishing clear parameters for information sharing while ensuring compliance with Federal Decree Law No. 45 of 2021 and related data protection regulations.
When do you need this document?
You need a Release of Information form whenever personal or confidential data must be shared between organizations in the UAE. Healthcare providers require this document before transferring medical records to other facilities or insurance companies. Educational institutions use these forms when sharing student records with prospective employers or other schools. Financial institutions need proper authorization before disclosing account information to third parties, government entities, or legal representatives. The document is also essential for employment background checks, legal proceedings requiring confidential information, and any situation where DIFC entities need to share data across jurisdictions.
Key legal considerations
Your Release of Information document must clearly identify all parties involved, including the information controller, data subject, and requesting party. The scope of information being released must be specifically defined to prevent unauthorized disclosure beyond the intended purpose. Include explicit time limitations for how long the authorization remains valid and specify the exact purposes for which the information may be used. Consider data retention requirements and whether the released information may be further shared by the receiving party. Address cross-border transfer implications if information will be sent outside the UAE, ensuring adequate protection measures are in place. Include provisions for the data subject's right to withdraw consent and establish clear procedures for secure information transfer methods.
Legal requirements in United Arab Emirates
Under Federal Decree Law No. 45 of 2021, you must obtain explicit and informed consent from the data subject before releasing personal information. Healthcare information sharing is governed by Federal Law No. 2 of 2019, which requires additional safeguards for medical records and health data. Your document must comply with UAE Cabinet Resolution No. 31 of 2019 regarding health data protection if medical information is involved. Electronic information transfers must meet cybersecurity standards outlined in Federal Law No. 5 of 2012. DIFC entities must additionally comply with DIFC Data Protection Law No. 5 of 2020 when operating within the financial free zone. Ensure your document includes Arabic translations where required by local regulations and maintains proper documentation for audit purposes. Data Protection Officers must be involved in the review process for organizations required to appoint them under UAE law.
GOVERNING LAW
Applicable law
This Release Of Information is drafted to comply with United Arab Emirates law. Key legislation includes:
Federal Law No. 2 of 2019: Concerning the Use of Information and Communication Technology in Healthcare, which regulates the handling and sharing of health information and medical records
Federal Law No. 5 of 2012: The Cybercrime Law (and its amendments), which includes provisions related to the privacy and confidentiality of electronic information and data
UAE Cabinet Resolution No. 31 of 2019: Regulations concerning health data protection and privacy, specifically addressing the sharing and disclosure of health information
DIFC Data Protection Law No. 5 of 2020: While specific to Dubai International Financial Centre, this law provides important guidelines for data protection that are often considered best practice throughout the UAE
Federal Law No. 7 of 1975: The Medical Practice Law, which includes provisions about medical confidentiality and the handling of patient information
Explore 208,390+ legal templates
Explore 208,390+ legal templates
Genie's Security Promise
Genie is the safest place to draft. Here's how we prioritise your privacy and security.
Your data is private:
We do not train on your data; Genie's AI improves independently
All data stored on Genie is private to your organisation
Your documents are protected:
Your documents are protected by ultra-secure 256-bit encryption
We are ISO27001 certified, so your data is secure
Organizational security:
You retain IP ownership of your documents and their information
You have full control over your data and who gets to see it