Online Course Agreement (UAE)
ONLINE COURSE AGREEMENT
Date: [Agreement Date]
Provider: [Provider Name] (Licence: [Provider Licence]), of [Provider Address] (the "Provider");
Learner: [Learner Name], email: [Learner Email], ID: [Learner ID] (the "Learner").
1. COURSE AND ACCESS
1.1 The Provider grants the Learner non-exclusive, non-transferable access to the course titled "[Course Title]" (the "Course") on [Platform] for a period of [Access Period] commencing on the enrolment date.
1.2 Course description and learning outcomes: [Course Description].
1.3 On meeting the completion requirements, the Provider shall issue: [Completion Certificate].
1.4 The Provider shall use reasonable endeavours to ensure the platform is available 24/7 but does not warrant uninterrupted access, and scheduled maintenance windows will be communicated in advance.
2. FEES AND REFUND POLICY
2.1 The Learner shall pay the Provider [Course Fee]. Payment is required in full at enrolment.
2.2 All fees are subject to Value Added Tax at the prevailing rate under the VAT Law (Federal Decree-Law No. 8 of 2017) where applicable. The Provider shall issue a valid tax invoice compliant with Federal Tax Authority (FTA) requirements.
2.3 Refund policy: [Refund Policy]. Refunds are processed in accordance with the Consumer Protection Federal Decree-Law No. 15 of 2020.
3. INTELLECTUAL PROPERTY AND ACCEPTABLE USE
3.1 All course content — videos, scripts, assessments, slides, and supporting materials — is the intellectual property of the Provider or its licensors and is protected by Federal Law No. 38 of 2021 on the Regulation and Protection of Intellectual Property Rights.
3.2 The Learner may access content for personal learning only. The Learner shall not download, copy, redistribute, sublicence, or make content available to third parties.
3.3 The Learner shall not share login credentials. Multiple simultaneous access from the same account without the Provider's written consent is prohibited.
4. PERSONAL DATA
4.1 The Provider collects and processes the Learner's personal data — name, email address, identification details, and course progress data — for the purposes of delivering the Course and issuing certificates. Processing is in compliance with the Personal Data Protection Law (Federal Decree-Law No. 45 of 2021).
4.2 The Provider shall not share the Learner's personal data with third parties except as required to deliver the Course or as required by applicable UAE law.
4.3 Where the platform is hosted outside the UAE, the Provider shall ensure appropriate cross-border data transfer safeguards under the PDPL.
5. GOVERNING LAW
5.1 This Agreement is governed by the laws of the United Arab Emirates. Disputes shall be referred to the competent UAE courts.
5.2 This Agreement is the entire agreement between the Parties regarding the Course and supersedes any prior representations.
Provider: [Provider Name]
Learner: [Learner Name]
Provider
________________
Signature
Learner
________________
Signature
What Is a Online Course Agreement (UAE)?
An Online Course Agreement in the United Arab Emirates is a binding contract under which an eLearning provider grants a learner non-exclusive, non-transferable access to a digital course — comprising video lectures, interactive assessments, downloadable materials, and live or recorded sessions — in return for a course fee, with both parties' rights and obligations governed by the UAE Civil Code (Federal Law No. 5 of 1985). Article 125 of the Civil Code confirms that the contract forms when the learner accepts the provider's terms and completes payment, and Article 246 requires both parties to perform in good faith.
Online education in the United Arab Emirates operates in a layered regulatory environment. At the federal level, the Ministry of Education oversees accreditation of online degree programmes. At the emirate level, the Knowledge and Human Development Authority (KHDA) in Dubai and the Abu Dhabi Department of Education and Knowledge (ADEK) in Abu Dhabi license private education providers, including those delivering online programmes to students based in the UAE. Free-zone businesses that deliver digital educational content — particularly those established in Dubai Knowledge Park, Dubai Internet City, or Dubai Silicon Oasis — operate under the rules of their free-zone authority. The Electronic Transactions and Trust Services Law (Federal Decree-Law No. 46 of 2021) validates the formation and execution of agreements in digital form, including click-through acceptance on a learning platform.
Consumer protection is central to online course contracts in the UAE. The Consumer Protection Federal Decree-Law No. 15 of 2020 and Cabinet Resolution No. 66 of 2023 (the executive regulation) require suppliers of services to disclose material terms clearly before purchase, including the price, the nature of the service, and the applicable refund policy. An online course provider must not misrepresent the content, level, or certification outcomes of the course, and its refund policy must be fair and accessible.
Intellectual property in online course content is protected by Federal Law No. 38 of 2021 on the Regulation and Protection of Intellectual Property Rights, which covers original literary and artistic works in digital form, including course videos, scripts, assessment questions, and slide decks. The course agreement must restrict the learner to personal use only and must prohibit downloading, redistribution, or sublicensing of content.
Personal data collected at enrolment — the learner's name, email, Emirates ID, payment details, and course progress — is regulated by the Personal Data Protection Law (Federal Decree-Law No. 45 of 2021), administered by the UAE Data Office. Where the learning platform is hosted outside the UAE, cross-border data transfer restrictions apply. Value Added Tax under the VAT Law (Federal Decree-Law No. 8 of 2017) applies to most online course supplies at the standard rate of 5%, and the provider must issue FTA-compliant tax invoices.
When Do You Need a Online Course Agreement (UAE)?
An Online Course Agreement in the United Arab Emirates is needed whenever an eLearning provider makes a paid online course available to a UAE-based learner, whether on a self-hosted platform, a licensed LMS, or a third-party marketplace.
The most common scenario is a UAE corporate training provider selling self-paced professional development courses — project management, cybersecurity, finance, or digital marketing — to individual professionals or to HR departments purchasing bulk enrolments for their workforce. In both cases, the agreement defines what access the learner receives, the access period, the refund policy, and the intellectual property restrictions.
Certification and examination preparation programmes — including IELTS, PMP, CFA, and UAE professional licences — need an agreement that is precise about what the fee includes: whether it covers the course materials only, a guaranteed resit, or the examination registration fee charged by the third-party certification body. Misrepresentation of certification outcomes is a consumer protection risk under the Consumer Protection Federal Decree-Law No. 15 of 2020.
University and higher education institutions offering online foundation or diploma programmes to UAE residents require formal enrollment agreements that reflect Ministry of Education accreditation requirements and the specific terms of their virtual learning environment. Where the institution is a recognised overseas university delivering credit-bearing courses, the agreement should specify the credit transfer and recognition framework.
Corporate upskilling programmes where an employer procures online access for multiple employees require a separate business-to-business agreement alongside the individual course agreement. The employer's agreement covers licensing of seats, data processing for multiple learners, and the employer's right to monitor completion rates.
Continuing professional education providers — legal, medical, engineering, and financial services CPD — that require participants to demonstrate completion to a regulator such as the Securities and Commodities Authority (SCA), the Central Bank of the UAE, or the Dubai Health Authority (DHA) must issue verifiable completion certificates, and the agreement must specify the conditions for award and the format of the certificate.
What to Include in Your Online Course Agreement (UAE)
A UAE Online Course Agreement that complies with the UAE Civil Code (Federal Law No. 5 of 1985) and the Consumer Protection Federal Decree-Law No. 15 of 2020 should contain the following elements. The forms-legal.com UAE online course agreement template addresses each component.
Party identification must record the provider's full legal name, trade or free-zone licence number, and registered address, together with the learner's full name, email address, and Emirates ID or passport number. The email address functions as the learner's unique identifier on the platform and is the primary communication channel under the Electronic Transactions and Trust Services Law (Federal Decree-Law No. 46 of 2021).
Course description and learning outcomes must define the course title, the content structure (modules, hours, assessment type), the level and prerequisite qualifications, and the specific learning outcomes the learner can expect on completion. A clear description is the primary consumer protection obligation: the Consumer Protection Federal Decree-Law No. 15 of 2020 prohibits misleading representations about the nature, quality, or result of a service.
Access rights and platform details must specify the learning platform or URL, the access period commencing on the enrolment date, the learner's device and connectivity requirements, and the provider's service availability commitment. Access is personal and non-transferable.
Fees and payment must state the course fee in AED, whether inclusive or exclusive of VAT at 5% under the VAT Law (Federal Decree-Law No. 8 of 2017), and the payment method. The provider must issue an FTA-compliant tax invoice.
Refund policy must clearly state the conditions under which a refund is available, the notice period, and the refund mechanism. Consumer protection principles under the Consumer Protection Federal Decree-Law No. 15 of 2020 require the refund policy to be fair and to be disclosed before the learner commits to purchase.
Completion requirements and certification must specify the pass mark, the conditions for issuance of a certificate, the name and format of the certificate, and any accreditation body whose logo appears on the certificate. The provider must not falsely imply government or international accreditation.
Intellectual property restrictions must prohibit downloading, redistribution, and sublicensing of course content, confirm the provider's ownership of all materials under Federal Law No. 38 of 2021 on Intellectual Property, and grant the learner a limited personal-use licence for the access period.
Data protection obligations must identify the categories of personal data collected, the purpose, the retention period, and the provider's compliance with the Personal Data Protection Law (Federal Decree-Law No. 45 of 2021). Cross-border data transfer safeguards must be addressed where the platform is hosted outside the UAE.
How to Fill Out Your Online Course Agreement (UAE)
Completing an Online Course Agreement for a UAE eLearning provider is straightforward. Fill each field with accurate information before or at the point of enrolment.
Enter the provider's full legal name exactly as on its trade or free-zone licence, together with the licence number and registered address. For free-zone providers in Dubai Knowledge Park, Dubai Internet City, or Dubai Media City, the licence number should reflect the free-zone registrar's reference.
Enter the learner's full name, email address, and Emirates ID or passport number. The email address is critical because it is the learner's unique account identifier and the method of delivering the tax invoice and any completion certificate. Enter the agreement or enrolment date in DD/MM/YYYY format.
Enter the course title exactly as it appears on the platform. Describe the course content and learning outcomes in specific terms: the number of modules or hours, the delivery format (self-paced video, live webinar, blended), and the assessment method. Do not overstate the outcomes — the Consumer Protection Federal Decree-Law No. 15 of 2020 prohibits misleading descriptions of services.
Enter the learning platform URL and the access period, such as '12 months from enrolment date'. The access period determines when the learner's access expires, so it should be commercially reasonable relative to the course volume.
Enter the course fee in AED. State whether the fee is inclusive or exclusive of VAT at 5% under the VAT Law (Federal Decree-Law No. 8 of 2017). For individual consumer purchases, the common practice is to quote the VAT-inclusive price. Issue an FTA-compliant tax invoice at the time of payment.
Select the certificate type: provider certificate of completion, accredited certification exam included, or no certificate. Where an accreditation body's name appears, confirm the accreditor has authorised use of its mark.
Enter the refund policy. A common approach in the UAE eLearning market is: full refund within 7 days of purchase if no module has been accessed; no refund after first module access. State the refund mechanism and the processing time.
Sign the agreement. For individual consumers, click-through acceptance on the platform is valid under the Electronic Transactions and Trust Services Law (Federal Decree-Law No. 46 of 2021). Download or email a copy of the signed agreement to the learner.
Legal Requirements for Online Course Agreement (UAE)
An Online Course Agreement in the United Arab Emirates is governed by multiple legal instruments. The UAE Civil Code (Federal Law No. 5 of 1985) provides the foundational contract law: Article 125 establishes formation, Article 246 requires good faith performance, and Articles 282 and 389 govern compensation for breach.
The Consumer Protection Federal Decree-Law No. 15 of 2020 and Cabinet Resolution No. 66 of 2023 apply when the learner is a consumer. The law requires the provider to disclose the price, the nature of the service, and the refund policy before the learner commits to purchase, prohibits misleading representations about the course content or certification outcomes, and gives the learner the right to a fair refund where the service is not delivered as described.
The Electronic Transactions and Trust Services Law (Federal Decree-Law No. 46 of 2021) validates electronic contracts, including click-through acceptance, and gives legal effect to electronic records and electronic signatures. The provider may rely on the learner's click-through acceptance as a valid binding agreement.
Intellectual property in course content is protected by Federal Law No. 38 of 2021 on the Regulation and Protection of Intellectual Property Rights. Unauthorised reproduction or distribution of course materials by a learner is an infringement enforceable in the UAE courts.
VAT under the VAT Law (Federal Decree-Law No. 8 of 2017) at 5% applies to most online course supplies. The Federal Tax Authority (FTA) has published guidance on the VAT treatment of electronically supplied services. The provider must issue compliant tax invoices.
Personal data is regulated by the Personal Data Protection Law (Federal Decree-Law No. 45 of 2021). Cross-border data transfers to jurisdictions without adequate protection require contractual safeguards. Free-zone providers in the DIFC are subject to the DIFC Data Protection Law (DIFC Law No. 5 of 2020).
Where the course leads to a professional qualification regulated by the Securities and Commodities Authority, the Central Bank of the UAE, or the Dubai Health Authority, the provider must meet the specific accreditation and record-keeping requirements of the relevant regulator.
Common Mistakes to Avoid in Your Online Course Agreement (UAE)
An Online Course Agreement in the UAE fails to protect the provider or the learner when the following common errors occur.
1. Overstating certification outcomes. Describing an online course as leading to a 'recognised UAE certification' or 'government-approved qualification' when the course is not accredited by the relevant authority is a misleading representation under the Consumer Protection Federal Decree-Law No. 15 of 2020. State exactly what credential is issued and by whom.
2. No clear refund policy. An agreement that is silent on refunds or that states 'no refunds under any circumstances' may be unenforceable as an unfair term under consumer protection principles. Set a fair, time-limited refund window — for example, a full refund within 7 days of purchase if no module has been accessed — and disclose it prominently before purchase.
3. No VAT treatment specified. Failing to state whether the quoted fee includes or excludes VAT at 5% under the VAT Law (Federal Decree-Law No. 8 of 2017) creates invoice disputes. State the VAT treatment clearly and issue an FTA-compliant tax invoice at the time of payment.
4. Vague access period. An agreement that states 'lifetime access' without capping the provider's obligation creates an open-ended commitment. Specify a defined access period, such as 12 months, and state what happens to the learner's access if the provider discontinues the course.
5. No intellectual property restrictions. Without an express prohibition on downloading and redistributing course content, the learner may argue that purchase implies permission to copy materials. Restrict access to personal use and cite Federal Law No. 38 of 2021 on Intellectual Property.
6. Missing data protection clause. Collecting a learner's email and payment details without addressing the Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) or the cross-border hosting arrangement creates regulatory risk. State the purpose of collection and the applicable legal basis.
7. Click-through acceptance not recorded. For consumer sales, the provider must be able to demonstrate that the learner accepted the terms before payment. A timestamped record of acceptance in the platform's database, valid under the Electronic Transactions and Trust Services Law (Federal Decree-Law No. 46 of 2021), is essential for enforcement.
Cite this page
Reference this free template in an article, syllabus, or research note:
Forms Legal. (2026). Online Course Agreement (UAE) (United Arab Emirates) [Legal document template]. Forms Legal. https://forms-legal.com/uae/business/services/online-course-agreement-uae
"Online Course Agreement (UAE) (United Arab Emirates)." Forms Legal, 2026, https://forms-legal.com/uae/business/services/online-course-agreement-uae.
@misc{formslegal-online-course-agreement-uae,
author = {{Forms Legal}},
title = {Online Course Agreement (UAE) (United Arab Emirates)},
year = {2026},
howpublished = {\url{https://forms-legal.com/uae/business/services/online-course-agreement-uae}},
note = {Free legal document template. Based on UAE Civil Code (Federal Law No. 5 of 1985)}
}Frequently Asked Questions
An online click-through agreement is legally binding in the United Arab Emirates under the Electronic Transactions and Trust Services Law (Federal Decree-Law No. 46 of 2021). The law gives legal effect to electronic contracts, electronic records, and electronic signatures, and confirms that an agreement is not invalid solely because it was concluded in electronic form. Where a learner ticks a box or clicks 'I agree' after being presented with the full course terms, that act constitutes acceptance under Article 125 of the UAE Civil Code (Federal Law No. 5 of 1985), which requires offer and acceptance on the essential terms.
For the click-through acceptance to be enforceable, the terms must be displayed clearly and accessibly before the learner commits to purchase. Burying key terms — particularly the refund policy, the access period, and the VAT treatment — in hard-to-find small print may be challenged as an unfair commercial practice under the Consumer Protection Federal Decree-Law No. 15 of 2020.
The provider should maintain a timestamped log of the learner's acceptance in the platform's database. This record is electronic evidence admissible in UAE courts and before the Dubai Courts under Article 21 of the Electronic Transactions Law. In practice, UAE online course providers routinely enforce click-through agreements for fee recovery and intellectual property infringement claims before the competent UAE courts.
A UAE consumer who purchases an online course has refund rights under the Consumer Protection Federal Decree-Law No. 15 of 2020 and Cabinet Resolution No. 66 of 2023. The law requires suppliers to disclose their refund policy clearly before the consumer commits to purchase and prohibits unfair terms that deny a refund entirely where the service has not been provided as described.
Where the course content is materially different from what was described at the point of purchase — for example, the course is incomplete, the video content does not match the advertised syllabus, or the promised certification exam is not included — the consumer may claim a full or partial refund as compensation for the mismatch between the description and the delivered service.
For digital goods and services, the provider may legitimately limit the refund window — for example, to 7 days from purchase where the consumer has not accessed any content — to prevent a learner from consuming the course and then seeking a refund. However, a policy that denies any refund even where the provider fails to deliver the course as advertised is likely to be unenforceable as an unfair term.
Complaints about online course refusals can be lodged with the Consumer Protection Department under the Ministry of Economy or with the relevant emirate's Consumer Protection authority, which has powers to investigate and impose fines on non-compliant providers.
Intellectual property in online course content — including video lectures, course scripts, assessment questions, slide decks, and downloadable workbooks — is protected by Federal Law No. 38 of 2021 on the Regulation and Protection of Intellectual Property Rights in the United Arab Emirates. Original works created by the course provider are protected automatically from the moment of creation without registration, although registration with the Ministry of Economy's Copyright Department provides additional evidence of ownership.
A learner who downloads, copies, redistributes, or publicly displays course content without the provider's permission commits copyright infringement. The provider may pursue civil damages before the Dubai Courts or the Abu Dhabi Judicial Department under Article 38 of Federal Law No. 38 of 2021, which provides for compensation for actual loss and moral damages. The law also provides criminal penalties for wilful infringement.
The Online Course Agreement is the primary contractual mechanism for enforcing IP restrictions. The agreement should expressly state that access is limited to personal use, that the learner may not download or redistribute materials, and that login credentials may not be shared. A clear, specific restriction in the agreement strengthens the provider's enforcement position and reduces the risk of ambiguity in proceedings before UAE courts.
Value Added Tax at the standard rate of 5% under the VAT Law (Federal Decree-Law No. 8 of 2017), administered by the Federal Tax Authority (FTA), generally applies to online courses sold to UAE-based learners by a UAE-registered provider. Most professional development and skills training courses supplied by commercial eLearning providers are taxable supplies.
The zero-rating exemption for educational services is narrow and applies to services forming part of an approved curriculum delivered by an approved educational institution — typically a school or university licensed by the Ministry of Education, the KHDA, or ADEK. Commercial short courses, professional certification preparation programmes, and eLearning content sold by a technology or training company rather than an approved educational institution are generally standard-rated.
For cross-border supplies — where a UAE-registered provider sells to a learner who is not based in the UAE — the place of supply rules under the VAT legislation determine whether UAE VAT applies. The FTA has published guidance on electronically supplied services, and providers should review their specific supply chain.
The Online Course Agreement should state the VAT treatment clearly. Where the course fee is AED 2,500 inclusive of VAT, the tax element is AED 119.05. The provider must issue an FTA-compliant tax invoice showing the taxable amount and the VAT charged, which the learner needs to recover input VAT if they are VAT-registered.
A UAE online course provider that collects personal data from learners during enrolment and course delivery is a data controller under the Personal Data Protection Law (Federal Decree-Law No. 45 of 2021), administered by the UAE Data Office. The PDPL requires the provider to process personal data lawfully, for a specified purpose, and only to the extent necessary for that purpose.
At enrolment, the provider collects the learner's name, email address, Emirates ID or passport number, payment details, and, during the course, progress and assessment data. The Online Course Agreement must explain the purpose of collection, the categories of data collected, the retention period, and the legal basis for processing under the PDPL.
Where the provider uses a third-party learning management system — such as Moodle, Thinkific, or Teachable — hosted outside the UAE, the cross-border data transfer restrictions in the PDPL apply. Data may only be transferred to a jurisdiction that the UAE Data Office has designated as adequate or where appropriate contractual safeguards are in place.
Learners have the right under the PDPL to access their personal data, to request correction of inaccurate data, and to request deletion at the end of the access period. The provider should retain completion records and tax invoices for the period required by UAE tax law but should securely delete course progress and personal data beyond that period. Free-zone providers in the DIFC are subject to the DIFC Data Protection Law (DIFC Law No. 5 of 2020) rather than the federal PDPL.
An employer in the United Arab Emirates can purchase bulk online course access for multiple employees under a corporate licensing arrangement with the course provider. This arrangement is distinct from the individual Online Course Agreement: the employer enters a separate business-to-business agreement that sets out the number of employee seats, the access period, the pricing model (per seat or enterprise licence), and the employer's right to assign and reassign seats as employees join or leave the organisation.
The employer's agreement should address data protection carefully. When the employer provides the provider with a list of employee names and email addresses, the employer is sharing personal data under the Personal Data Protection Law (Federal Decree-Law No. 45 of 2021), and the provider becomes a data processor acting on the employer's instructions. A data processing addendum should be attached to the corporate agreement.
For employers in regulated sectors — financial services firms regulated by the Central Bank of the UAE or the Securities and Commodities Authority (SCA), healthcare organisations regulated by the Dubai Health Authority (DHA) or the Abu Dhabi Health Services Company (SEHA), or MOHRE-registered entities with Emiratisation compliance programmes — bulk course purchases may need to be linked to specific CPD or Emiratisation training requirements. The provider should be able to generate completion reports in a format acceptable to the relevant regulator. VAT at 5% under the VAT Law (Federal Decree-Law No. 8 of 2017) applies to the corporate purchase, and the employer needs an FTA-compliant tax invoice for input VAT recovery.
Where an online course provider in the United Arab Emirates ceases operations before a learner's access period expires, the learner has a claim for the unexpired portion of the course fee under the UAE Civil Code (Federal Law No. 5 of 1985). Article 272 allows a party to seek rescission and damages where the other fails to perform, and Articles 282 and 389 require the party in breach to compensate the injured party for loss actually suffered.
In practice, recovery from a liquidated provider may be limited. The learner should prioritise payment methods that offer chargeback rights — credit cards in particular — because the payment processor's chargeback mechanism often provides the fastest practical remedy.
Consumer Protection authorities under the Consumer Protection Federal Decree-Law No. 15 of 2020 may investigate providers that close without honouring outstanding access commitments, and the Ministry of Economy's Consumer Protection Department has powers to facilitate refunds and to impose penalties.
To reduce this risk, the Online Course Agreement can include a content preservation obligation requiring the provider to offer a downloadable archive of purchased materials or to facilitate migration to an alternative platform on closure. Learners purchasing high-value professional certification courses should prefer providers with established reputations and verifiable KHDA or ADEK accreditation, as regulated providers are subject to financial requirements designed to protect enrolled learners.
This template is provided for informational purposes only and does not constitute legal advice. Laws vary by jurisdiction and change over time. Consult a qualified attorney for advice specific to your situation.Full disclaimer
Found an error? Let us knowRelated Documents
You may also find these documents useful:
Training Services Agreement (UAE)
A corporate training services agreement for the UAE setting out the programme scope, fees, certification, and data protection obligations under the UAE Civil Code (Federal Law No. 5 of 1985) and KHDA/ADEK regulations. Covers in-person, online, and blended delivery.
SaaS Subscription Agreement (UAE)
A SaaS subscription agreement for the UAE governing cloud software access, service levels, data protection, and subscription fees, compliant with the Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) and Copyright Federal Decree-Law No. 38 of 2021.
Software Licence Agreement (UAE)
A software licence agreement for the UAE allowing a software owner to grant a business the right to use a software product, compliant with the Copyright Federal Decree-Law No. 38 of 2021, PDPL, and UAE Civil Code.
Website Terms and Conditions (UAE)
Website Terms and Conditions set out the contract between a UAE website operator and its users, covering services, payment, acceptable use, liability, and data protection. They align with the Consumer Protection Law (Federal Law No. 15 of 2020), the Personal Data Protection Law (Federal Decree-Law No. 45 of 2021), and UAE electronic commerce rules.
Data Processing Agreement (UAE)
A data processing agreement for the UAE governing how a data processor handles personal data on behalf of a data controller, fully compliant with the Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) administered by the UAE Data Office.