Civil Liability of The Data Controller For Data Storage: A General Perspective In Light of The UAE Personal Data Protection Law

This study analyzes the civil liability of the data controller concerning data storage and the administration of personal information. It specifically addresses the responsibilities of the data controller for the processing of personal data, emphasizing the data owner's right to request the deletion of their personal information. In the United Arab Emirates (UAE), the legal framework for personal data protection has significantly evolved, particularly with the enactment of Federal Law No. 45 of 2021 on the Protection of Personal Data. This legislation delineates the obligations of data controllers, particularly in instances of noncompliance with legal mandates for data deletion. The paper examines the responsibilities of the data controller in protecting personal data, highlighting the conditions necessitating data deletion and the legal obligations that ensue when these conditions are not fulfilled. It further examines the type and scope of legal liability that may be imposed on data controllers for non-compliance with data protection legislation, including potential compensation for losses suffered by the data owner. This paper examines pertinent legal provisions and judicial interpretations in the UAE to elucidate the data controller's responsibilities in personal data protection and the legal ramifications of non-compliance with these obligations.