UAE PDPL
UAE federal law for personal data protection compliance
EN 1090
EU harmonized standard for steel and aluminium structural execution
Quick Verdict
UAE PDPL governs personal data protection across onshore private sectors with rights and breach rules, while EN 1090 mandates CE marking for steel/aluminium structures via FPC. Organizations adopt PDPL for privacy compliance, EN 1090 for EU market access.
UAE PDPL
Federal Decree-Law No. 45/2021 on Personal Data Protection
Key Features
- Mandatory DPO and DPIAs for high-risk processing
- Extraterritorial scope for foreign entities processing UAE data
- Universal Records of Processing Activities requirement
- Pre-processing transparency on purposes and transfers
- Carve-outs for free zones and sectoral regimes
EN 1090
EN 1090 Execution of steel and aluminium structures
Key Features
- Factory Production Control (FPC) certification by Notified Body
- Risk-based Execution Classes (EXC1-EXC4)
- CE marking and Declaration of Performance (DoP)
- Welding quality management via ISO 3834
- Material traceability and scaled NDT inspection
Detailed Analysis
A comprehensive look at the specific requirements, scope, and impact of each standard.
UAE PDPL Details
What It Is
UAE PDPL (Federal Decree-Law No. 45 of 2021 Concerning the Protection of Personal Data) is a comprehensive federal regulation establishing economy-wide personal data governance in onshore UAE. Effective 2 January 2022, it adopts a risk-based approach with principles like fairness, purpose limitation, minimization, accuracy, security, and storage limitation, overseen by the UAE Data Office.
Key Components
- Core pillars: lawful bases (consent primary, exceptions for contracts/public interest), data subject rights (access, portability, erasure, objection), controller/processor obligations (RoPAs, security, breach notification).
- Mandatory for high-risk: DPOs, DPIAs.
- Built on GDPR-like framework with UAE exclusions (free zones, health/banking sectors).
- No certification; compliance via records and audits.
Why Organizations Use It
Mandated for onshore entities and extraterritorial processors of UAE data; mitigates fines, builds trust, enables secure digital economy. Enhances cybersecurity, vendor controls, global interoperability.
Implementation Overview
Phased: discovery/gap analysis, remediation (RoPAs, DPIAs), operationalization (DSR workflows, training), monitoring. Applies to private sector; 6-12 months typical, risk-based for all sizes.
EN 1090 Details
What It Is
EN 1090 is a harmonized European standard family (EN 1090-1, -2, -3) governing execution and conformity assessment of structural steel and aluminium components under the EU Construction Products Regulation (CPR). It enables CE marking for load-bearing metal products in construction. The risk-based approach uses Execution Classes (EXC1-EXC4) to scale requirements by failure consequence, service, and production categories.
Key Components
- **EN 1090-1Factory Production Control (FPC), Declaration of Performance (DoP), Notified Body certification.
- **EN 1090-2/-3Technical rules for materials, welding, tolerances, corrosion protection, inspection/NDT.
- Built on ISO 3834 for welding quality; traceability and process controls core.
- AVCP systems with ongoing surveillance.
Why Organizations Use It
- Mandatory for EEA market access; avoids exclusion, fines, liability.
- Drives quality, reduces rework, enhances traceability.
- Builds trust with clients, insurers; competitive for high-risk projects.
Implementation Overview
Phased: gap analysis, FPC development, welding quals, NB audits. Targets fabricators; 3-12 months; suits all sizes with welding focus.
Key Differences
| Aspect | UAE PDPL | EN 1090 |
|---|---|---|
| Scope | Personal data processing onshore UAE | Steel/aluminium structural components execution |
| Industry | All private sectors onshore UAE | Construction/metal fabrication EU/EEA |
| Nature | Mandatory federal privacy law | Harmonized standard for CE marking |
| Testing | DPIAs for high-risk, records of processing | FPC certification, ITT/ITC by notified bodies |
| Penalties | Administrative fines, criminal liability | Certificate suspension, market exclusion |
Scope
Industry
Nature
Testing
Penalties
Frequently Asked Questions
Common questions about UAE PDPL and EN 1090
UAE PDPL FAQ
EN 1090 FAQ
You Might also be Interested in These Articles...
Your Guide to Implementing PCI DSS in Your Organization
Step-by-step guide to implementing PCI DSS in your organization. Achieve compliance, protect cardholder data, and reduce risks. Start securing payments today!
ISO 27701 Implementation Roadmap: Step-by-Step Guide for Extending Your ISO 27001 ISMS to PIMS
Extend ISO 27001 ISMS to ISO 27701 PIMS with this step-by-step roadmap. Master role-specific controls, avoid pitfalls, meet certification evidence needs for pri
NIST CSF 2.0 Supply Chain Risk Management: Complete Playbook with Profiles, Tiers, and Vendor Assessment Templates
Master NIST CSF 2.0 ID.SC supply chain risk management with vendor assessment templates, profile gap analysis, and tier strategies. Mitigate third-party threats
Run Maturity Assessments with GRADUM
Transform your compliance journey with our AI-powered assessment platform
Assess your organization's maturity across multiple standards and regulations including ISO 27001, DORA, NIS2, NIST, GDPR, and hundreds more. Get actionable insights and track your progress with collaborative, AI-powered evaluations.
Check out these other Gradum.io Standards Comparison Pages
APPI vs 23 NYCRR 500
Discover APPI vs 23 NYCRR 500: Japan's privacy law meets NYDFS cybersecurity rules. Uncover key differences, compliance strategies & pitfalls for financial firms. Master both now!
ISO 27017 vs APRA CPS 234
Compare ISO 27017 vs APRA CPS 234: Key cloud security standards for financial CSPs. Uncover control gaps, governance, testing & third-party rules. Achieve compliance today!
Six Sigma vs ISO 31000
Compare Six Sigma vs ISO 31000: DMAIC defect reduction & belts vs risk principles/framework. Key diffs, benefits for process excellence & governance. Choose wisely—optimize now!