With rising concerns over the free movement of Personal Data and the minimal rights in place to protect the movement of data, a number of countries have come up with their own data protection laws. In the UAE, the Dubai International Financial Center (DIFC) has issued a new data protection law called ’Data Protection Law 2020’. The Law has come into force from 1 July 2020. A grace period of three months was provided to comply with the new regulations as enforcement began on 1 October 2020. This article discusses the main provisions of the new Law and its impact on businesses.