🇦🇪 UAE · PDPL Checklist 2026

UAE PDPL Compliance Checklist

Built for HR, L&D and compliance teams — not IT.

25Checklist items

5Risk areas

~10Minutes

Tick every check you can confidently say yes to. You'll get your score instantly — no email needed to see it. This focuses on the everyday, people-level decisions where compliance actually lives.

1Data collection & consent

We don't collect personal data we don't actually need (no "just in case" fields) We tell people why we're collecting their data before we collect it Our privacy notice is in plain language, not a buried PDF We get explicit consent before collecting sensitive data (health, biometrics, beliefs) We can produce a record of when and how each consent was given

2Employee & HR data handling

We know exactly what employee data we hold and where it lives Access is limited to authorised staff (not a shared drive open to everyone) Employee data does NOT travel through personal WhatsApp or private email We have a retention policy and actually delete data when it's no longer needed People handling HR data have had training specific to their role

3Breach response

We have a documented process for spotting a personal data breach There is a named person who owns the breach response Our team knows who to escalate to the moment something looks wrong A notification message is drafted before we ever need it We've tested the process in the last 12 months

4Third-party & vendor sharing

We know which vendors receive personal data from our teams Data-processing agreements are in place with each of them Data is shared only when there's a legitimate reason We check that our vendors handle data as carefully as we do We know what happens to shared data when a vendor contract ends

5Staff awareness & training

Everyone who handles personal data has had awareness training in the last 12 months New joiners get it during onboarding, not months later Our team can recognise a phishing attempt aimed at harvesting personal data Everyone knows who to report an incident to, and feels safe doing so We track completion, so we can show the record when asked

0/25

Want the full breakdown?

Get your results by area plus a short “fix these first” action plan emailed to you — the practical next steps for closing your biggest gaps.

✓ On its way — check your inbox shortly.

Or try a free 10-minute micro-lesson: start the demo →

Cyber Instincts. Built, Not Taught.

cybernym.io