Dubai International Financial Centre (DIFC), the leading global financial centre in the Middle East, Africa and South Asia (MEASA) region, proposes to amend its DIFC Data Protection Regulations (DP Regulations). 

The proposed amendments seek to strengthen and streamline the regulatory framework by enhancing requirements to embed safety in systems processing Personal Data in an AI‑native jurisdiction, while clarifying certification obligations and the role of the Autonomous Systems Officer (ASO), said a statement from DIFC.

It also aims at introducing new powers for the Commissioner to recognise accreditation and certification schemes, it stated.

DIFC Authority Chief Legal Officer Jacques Visser said: "We are pleased to launch this consultation on the proposed amendments to the DIFC Data Protection Regulations. As the use of AI and data-driven systems continues to develop, it is important that the regulatory framework remains practical, clear and able to respond to the way these technologies are being used."

"These amendments are intended to help provide that clarity, while supporting high standards of accountability and governance across DIFC," he added.

The DP Regulations were updated in 2023 to introduce safeguards for the rapidly expanding use of Personal Data in advanced, AI‑enabled Systems, recognising both their transformative potential and the unprecedented scale of data processing they involve. 

Building on this foundation, the proposed amendments aim to enhance and refine Regulation 10 by strengthening expectations around safe, ethical, and privacy by design development in an AI native jurisdiction; and introduce a new Regulation 11 empowering the Commissioner to recognise accreditation and certification frameworks. Additionally, they will provide greater clarity on certification requirements and the role of the ASO, as well as introduce other consequential updates to support robust and future ready data protection governance.-TradeArabia News Service