Personal Information Consent Form Template for the United Arab Emirates

When your organization collects personal information from individuals in the United Arab Emirates, you need a legally compliant consent form that meets federal data protection requirements. The Personal Information Consent Form serves as your legal foundation for processing personal data, ensuring you obtain explicit, informed consent from data subjects before handling their information. This document is essential for demonstrating compliance with UAE Federal Decree Law No. 45 of 2021 and protecting your organization from regulatory penalties.

When do you need this document?

You require a Personal Information Consent Form whenever your organization collects personal data from customers, employees, or any individuals within the UAE. This includes situations such as customer registration processes, employee onboarding, marketing campaigns, service delivery, or research activities. The form becomes particularly crucial when processing sensitive personal data categories like health information, financial records, or biometric data. Organizations operating across multiple emirates or within free zones like DIFC or ADGM must ensure their consent forms address specific jurisdictional requirements. You also need updated consent forms when expanding data processing activities or sharing information with third-party processors.

Key legal considerations

Your consent form must demonstrate that individuals understand exactly what personal data you collect, how you process it, and their rights regarding that information. The consent must be freely given, specific, informed, and unambiguous under UAE law. You must clearly explain the purpose of data collection, specify data categories being processed, identify any third parties who will access the information, and outline data retention periods. The form should include withdrawal mechanisms, allowing individuals to revoke consent at any time. You must also address cross-border data transfers if your organization shares information internationally. Additionally, ensure your form accommodates special consent requirements for minors, requiring parental or guardian approval for individuals under 21 years of age.

Legal requirements in United Arab Emirates

Federal Decree Law No. 45 of 2021 establishes comprehensive data protection obligations that your consent form must address. The law requires explicit consent for all personal data processing activities, with enhanced protections for sensitive data categories. Your form must comply with transparency obligations, providing clear information about data controllers, processing purposes, and legal bases for processing. If your organization operates within the Dubai International Financial Centre, you must also comply with DIFC Data Protection Law No. 5 of 2020, which imposes additional consent requirements. Similarly, Abu Dhabi Global Market entities must adhere to ADGM Data Protection Regulations 2021. The UAE Constitution Article 31 further reinforces privacy rights that your consent mechanisms must respect. Failure to obtain proper consent can result in administrative fines up to AED 2 million and operational restrictions, making compliant consent forms essential for business continuity.