Ibrahim Hasan The Dubai International Financial Centre (DIFC) Data Protection Law No. 5 of 2020 (DPL 2020) regulates the collection, handling, disclosure and use of personal data, and includes enhanced governance and transparency obligations. It replaces the previous data protection law in the form of DIFC Law No. 1 of 2007. DPL 2020 is closely aligned with the EU General Data Protection Regulation (GDPR) and its recently born cousin, the UK GDPR. DPL 2020 mainly applies to businesses operating in the Dubai International Financial Centre (DIFC). This is the leading financial hub in the Middle East, Africa and south-Asia region. The 110-acre DIFC district hosts 2,400 businesses employing over 25,000 professionals in the legal, financial, management and regulatory sectors.