{"slug":"uae-pdpl-impact-assessment-new-technologies","id":"AIPT-OBL-0071","permanent_url":"https://aipolicytracker.org/id/AIPT-OBL-0071","title":"Conduct a data protection impact assessment for high-risk processing using new technologies","short_title":"Data protection impact assessment","category":"impact_assessment","summary":"Before processing that uses modern technologies and is likely to pose a high risk to privacy, controllers must assess the impact on personal data protection, covering the processing, its purposes, risks and safeguards.\n","practical_action":"Run a DPIA for AI systems processing personal data of UAE residents and keep it on file.","is_binding":true,"applies_from":null,"section":null,"source_reference":"Article on data protection impact assessment (reviewer to cite article number)","official_source_url":"https://u.ae/en/about-the-uae/digital-uae/data/data-protection","review_status":"pending_review","confidence_level":"medium","last_verified_at":null,"reviewed_by":null,"actors":["provider","deployer"],"sectors":["cross_sector"],"use_cases":["biometrics","generative_ai"],"applicability":[{"description":"Controllers using new technologies for high-risk processing.","actors":["provider","deployer"],"conditions":null}],"evidence_examples":[{"title":"Data protection impact assessment","description":null,"artifact_type":"report"}],"framework_mappings":[{"framework":"iso_42001","framework_name":"ISO/IEC 42001:2023","reference":"Clause 6.1.4 AI system impact assessment","note":"Original editorial mapping.","confidence_level":"medium","is_original":true}],"controls":[{"slug":"privacy-and-data-protection-for-ai","title":"Privacy and data-protection controls for AI","kind":"process","relationship":"satisfies","note":"DPIA before high-risk processing with new technologies.","confidence_level":"high","url":"https://aipolicytracker.org/controls/privacy-and-data-protection-for-ai"},{"slug":"ai-impact-assessment","title":"AI impact and fundamental-rights impact assessment","kind":"process","relationship":"supports","note":"Broader impact analysis feeds the DPIA.","confidence_level":"medium","url":"https://aipolicytracker.org/controls/ai-impact-assessment"}],"url":"https://aipolicytracker.org/obligations/uae-pdpl-impact-assessment-new-technologies","policy":{"slug":"uae-personal-data-protection-law","title":"Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (UAE PDPL)","status":"in_force","jurisdiction":"uae","url":"https://aipolicytracker.org/policies/uae-personal-data-protection-law"}}