Written Consent Form Template for the United Arab Emirates
Generate a bespoke document
What is a Written Consent Form?
A Written Consent Form is a critical legal document used across various sectors in the United Arab Emirates to obtain and document explicit authorization from individuals for specific activities, procedures, or data processing. This document type is particularly relevant in light of the UAE's comprehensive regulatory framework, including the Personal Data Protection Law (Federal Law No. 45 of 2021) and sector-specific regulations. The form serves as evidence of informed consent and must be drafted to ensure compliance with UAE legal requirements, including considerations for language (Arabic/English), data protection, and specific sectoral obligations. Written Consent Forms are essential tools for organizations operating in the UAE to demonstrate regulatory compliance and maintain transparent relationships with individuals whose consent is being sought.
Frequently Asked Questions
Is a written consent form legally binding in the United Arab Emirates?
Yes, a properly executed written consent form is legally binding in the UAE under Federal Law No. 45 of 2021 (Personal Data Protection Law) and Federal Law No. 2 of 2019 (Health Data Protection Law). The document must clearly specify the purpose of consent, include all required disclosures, and be signed by the consenting party to be enforceable in UAE courts.
Can I be fined if my written consent form is missing or incomplete in UAE?
Yes, under UAE Federal Law No. 45 of 2021, organizations can face fines ranging from AED 500,000 to AED 2 million for non-compliance with consent requirements. Missing or incomplete consent forms may also result in suspension of data processing activities and potential criminal liability for data controllers.
How specific must consent purposes be under UAE Personal Data Protection Law?
UAE Federal Law No. 45 of 2021 requires consent to be specific, informed, and unambiguous for each distinct purpose. Blanket consent is not acceptable - you must clearly state each activity, specify data types being collected, identify recipients, and explain retention periods. Generic language like 'business purposes' will not satisfy UAE legal requirements.
How does a written consent form differ from a data processing agreement in UAE?
A written consent form is signed by the data subject (individual) giving permission for specific data processing activities, while a data processing agreement is a contract between a data controller and data processor outlining their respective obligations. Both are required under UAE Federal Law No. 45 of 2021 but serve different compliance purposes.
How long does it typically take to prepare a UAE-compliant written consent form?
A basic UAE-compliant written consent form typically takes 2-5 business days to draft and review, depending on complexity and data types involved. Forms involving health data under Federal Law No. 2 of 2019 may require additional time for specialized legal review to ensure full compliance.
Can consent be withdrawn after signing a written consent form in UAE?
Yes, under UAE Federal Law No. 45 of 2021, individuals have the right to withdraw consent at any time. Your consent form must include clear instructions on how to withdraw consent, and you must stop processing the individual's data within a reasonable timeframe after receiving their withdrawal request.
Common mistakes people make when drafting consent forms in UAE include what?
The most common mistakes include using vague language about data purposes, failing to specify data retention periods, not providing withdrawal mechanisms, and attempting to bundle consent for multiple unrelated purposes. Many also forget to include required Arabic translations for certain contexts and fail to update forms when UAE regulations change.
About the Written Consent Form
A Written Consent Form is a fundamental legal document that establishes clear authorization between parties in the United Arab Emirates. Under UAE law, particularly the Personal Data Protection Law (Federal Law No. 45 of 2021) and Health Data Protection Law (Federal Law No. 2 of 2019), obtaining proper written consent has become essential for organizations processing personal information or conducting activities requiring individual authorization.
When do you need this document?
You need a Written Consent Form whenever you're collecting, processing, or using personal data in the UAE. This includes healthcare providers obtaining patient consent for medical procedures, educational institutions processing student information, employers handling employee data, research organizations conducting studies, and businesses collecting customer information for marketing purposes. The UAE's strict data protection framework requires explicit consent for most data processing activities, making this document crucial for legal compliance. Additionally, you'll need written consent for photography, video recording, participation in events, use of testimonials, and any activity that involves personal rights or privacy.
Key legal considerations
Your Written Consent Form must clearly specify the purpose, scope, and duration of the consent being granted. Under UAE law, consent must be freely given, specific, informed, and unambiguous. The document should include withdrawal mechanisms, allowing individuals to revoke consent at any time. For medical consent, you must comply with the Medical Practice Law (Federal Law No. 7 of 1975), ensuring patients understand risks and alternatives. Data processing consent requires detailed information about data types, processing purposes, storage periods, and third-party sharing. The form must identify all parties involved, including legal guardians for minors and witnesses where required. Consider language requirements, as many UAE residents may need Arabic translations or interpreter services.
Legal requirements in United Arab Emirates
UAE law mandates that Written Consent Forms include specific elements to be legally valid. You must provide the document in Arabic or ensure professional translation services are available, particularly for non-Arabic speakers. The Personal Data Protection Law requires explicit consent for sensitive personal data processing, with enhanced protections for children under 18 requiring parental or guardian consent. Your form must identify the data controller, specify data retention periods, and explain individuals' rights including access, correction, and deletion. For healthcare settings, compliance with the Health Data Protection Law requires additional safeguards for medical information. In the Dubai International Financial Centre (DIFC), separate data protection regulations may apply. The Civil Code (Federal Law No. 5 of 1985) governs general contract formation principles, requiring that consent be given by legally capable individuals. Documentation must be maintained for regulatory compliance, and you should implement appropriate security measures to protect the consent records themselves.
GOVERNING LAW
Applicable law
This Written Consent Form is drafted to comply with United Arab Emirates law. Key legislation includes:
UAE Federal Law No. 45 of 2021: Law on Protection of Personal Data (PDPL) - Governs the collection and processing of personal data and requirements for consent
UAE Federal Law No. 5 of 1985: Civil Code - Contains general provisions regarding contract formation, consent, and legal capacity to enter into agreements
UAE Federal Law No. 7 of 1975: Medical Practice Law - Relevant if the consent form relates to medical procedures or healthcare services
DIFC Law No. 5 of 2020: Data Protection Law (if applicable in Dubai International Financial Centre) - Specific requirements for consent and data processing in the DIFC
UAE Federal Law No. 1 of 2006: Electronic Transactions and Commerce Law - Relevant if the consent form will be executed electronically
Explore 208,390+ legal templates
Explore 208,390+ legal templates
Genie's Security Promise
Genie is the safest place to draft. Here's how we prioritise your privacy and security.
Your data is private:
We do not train on your data; Genie's AI improves independently
All data stored on Genie is private to your organisation
Your documents are protected:
Your documents are protected by ultra-secure 256-bit encryption
We are ISO27001 certified, so your data is secure
Organizational security:
You retain IP ownership of your documents and their information
You have full control over your data and who gets to see it