GDPR’s impact on UAE-based firms

May, 03,2018

Galadari Advocates & Legal Consultants today held a seminar to discuss the potential impact of the soon-to-be implemented General Data Protection Regulation (GDPR) on companies and institutions.

Entities operating in the UAE with website and online platforms accessed by users in the EU are advised to adhere to the new regulation prior to its implementation by the end of this month, regardless of these firm’s activities. According to, organizations that do not comply with the new regulation can face fines of up to 4% of annual global turnover or €20 Million.

Davide Paoli, Senior Associate at Galadari Advocates & Legal Consultants and one of the speakers at the seminar, said that organizations in the region will potentially be subject to GDPR, regardless of the type of their activities. In essence, all companies that seek to have any relationship with Europe, if users’ data is processed or monitored in any form, must comply with the new regulation.

“GDPR provides an incentive for companies to look at data in a new way; so instead of having the upper hand by hold users’ information, they now must do whatever they can to protect this data. One difference people will discernably notice is the reduction of spam emails, as companies will be prohibited to sell user information under GDPR”, added Paoli.

Alexandros Nousias, a Compliance Consultant and a speaker at the event, elaborated that GDPR is not only about the fines, but also about creating new sustainable business models. “The EU market will look for businesses that are in compliance with regulations, such as GDPR. As such, companies in the region are advised to adhere to the regulation in order to increase their attractiveness in the EU market.”