The Data Protection Commissioner of the Dubai International Financial Centre Authority (DIFCA) launched Consultation Paper No 3, seeking public comment on DIFCA’s proposals to amend the Data Protection Law, DIFC Law No 1 of 2007 and the Data Protection Regulations. The newly amended Law embodies international best practice standards, is consistent with EU Directives and OECD guidelines, and is designed to balance the legitimate needs of businesses and organizations to process personal data while upholding individuals’ rights to privacy. The Law and the newly amended Law apply only to individuals and organizations established in the Dubai International Financial Centre (DIFC)’ and a maximum fine of US$ 25,000 could be introduced for failing to register with the Commissioner’s Office. The amended Law is expected to come into effect by June or July of 2012.