ΊΪΑΟΚΣΖ΅

Consent To Share Form Template for the United Arab Emirates

Generate a bespoke document

What is a Consent To Share Form?

The Consent To Share Form is a crucial document required under UAE data protection regulations, particularly Federal Decree Law No. 45 of 2021, when organizations need to share personal data with third parties. This document serves as evidence of explicit consent and helps organizations maintain compliance with UAE privacy laws. The form should be used whenever personal data needs to be shared beyond the original purpose of collection or with parties not initially disclosed to the data subject. It includes essential elements such as the identity of all parties involved, specific types of data to be shared, purpose of sharing, duration of consent, and the data subject's rights. The document must be available in both Arabic and English when dealing with UAE residents, and special considerations apply when handling sensitive data categories or international transfers.

Frequently Asked Questions

Is a Consent To Share Form legally binding in the United Arab Emirates?

Yes, a properly executed Consent To Share Form is legally binding in the UAE under Federal Decree Law No. 45 of 2021 (Personal Data Protection Law). The form creates a legal obligation for the data controller to only share personal data as specified in the consent, and gives the data subject enforceable rights regarding their personal information.

How long does it take to create a Consent To Share Form in UAE?

Creating a basic Consent To Share Form typically takes 1-2 hours using a template, but can take several days if drafted from scratch with legal review. The timeframe depends on the complexity of data sharing arrangements and whether you need legal consultation to ensure compliance with UAE Personal Data Protection Law requirements.

Can UAE authorities penalize my company for missing or incomplete Consent To Share Forms?

Yes, the UAE Data Protection Office can impose severe penalties for missing or incomplete consent forms under Federal Decree Law No. 45 of 2021. Fines can range from AED 500,000 to AED 2 million for violations. Companies may also face operational restrictions and mandatory compliance audits if they fail to obtain proper consent before sharing personal data.

Which specific UAE laws require consent before sharing personal data?

Federal Decree Law No. 45 of 2021 (Personal Data Protection Law) is the primary legislation requiring explicit consent before sharing personal data in the UAE. Additionally, Federal Law No. 2 of 2019 on Information and Communication Technology provides supporting regulations. These laws mandate written consent forms that clearly identify the data controller, recipient, and purpose of data sharing.

How is a Consent To Share Form different from a general privacy policy in UAE?

A Consent To Share Form is a specific, targeted document for individual data sharing transactions, while a privacy policy is a general disclosure document. Under UAE law, the consent form requires explicit agreement for specific data sharing purposes and must be obtained before each sharing instance, whereas a privacy policy provides broad information about data practices.

Can individuals withdraw their consent after signing a UAE Consent To Share Form?

Yes, under Federal Decree Law No. 45 of 2021, individuals have the right to withdraw their consent at any time in the UAE. Once consent is withdrawn, the data controller must immediately stop sharing the personal data and may need to notify third parties who received the data. The original consent form should include clear instructions for withdrawal procedures.

Which common mistakes make UAE Consent To Share Forms invalid?

The most common mistakes include failing to specify the exact data being shared, not identifying all recipient parties, using vague language about sharing purposes, and omitting withdrawal procedures. Under UAE law, consent must be freely given, specific, informed, and unambiguous - forms that bundle consent with other agreements or use pre-ticked boxes are typically invalid.

Reviewed by

Legal Engineer, GenieAI

A lawyer, legal researcher and legal tech founder, Swetha has built AI products deployed inside Tier 1 firms and enterprises. She ensures GenieAI's alignment with the latest regulation and executes testing on the legal robustness of Genie output.

Reviewed by

Legal Engineer, GenieAI

A Skadden-trained M&A lawyer, Imad advised on cross-border transactions and contractual risk before moving into legal AI. He reviews GenieAI's output for compliance and enforceability across our 150+ supported jurisdictions, as well as facilitating external benchmarking.

Reviewed by

&

Publisher

GenieAI

Sector

Business

Cost

Free to use

Last updated

About the Consent To Share Form

A Consent To Share Form is an essential legal document you need when your organization wants to share personal data with third parties in the United Arab Emirates. This form ensures you comply with Federal Decree Law No. 45 of 2021, the UAE's comprehensive Personal Data Protection Law, by obtaining explicit written consent before any data sharing occurs.

When do you need this document?

You must use this form whenever you plan to share personal data beyond its original collection purpose or with parties not initially disclosed to the data subject. This includes sharing customer information with business partners, transferring employee data to service providers, or providing patient records to healthcare specialists. The form is particularly crucial when dealing with sensitive data categories such as health information, financial records, or biometric data. Under UAE law, you cannot rely on implied consent – the data subject must provide clear, informed, and documented agreement to the specific data sharing arrangement.

Key legal considerations

Your consent form must include several critical elements to be legally valid under UAE law. You need to clearly identify all parties involved, including the data controller, data subject, and all third-party recipients. The form must specify exactly what types of personal data will be shared, the purpose of sharing, and how long the consent remains valid. You must also inform the data subject of their rights, including the right to withdraw consent at any time. For minors or individuals lacking legal capacity, you need consent from their legal guardian. The document should be available in both Arabic and English to ensure accessibility for UAE residents. Additionally, you must implement appropriate security measures to protect the shared data and maintain records of all consent transactions.

Legal requirements in United Arab Emirates

UAE data protection law imposes specific requirements that your consent form must address. Under Federal Decree Law No. 45 of 2021, you must ensure the consent is freely given, specific, informed, and unambiguous. For healthcare data sharing, Federal Law No. 2 of 2019 adds additional requirements for digital consent mechanisms and security protocols. If you're using electronic signatures, the form must comply with Federal Law No. 1 of 2006 on Electronic Transactions. When sharing data internationally, you need to verify that the recipient country provides adequate data protection or implement additional safeguards. Federal government entities must also comply with Cabinet Resolution No. 21 of 2013 regarding information security. The Consumer Protection Law (Federal Law No. 24 of 2006) requires clear disclosure of how consumer data will be used, ensuring transparency throughout the sharing process.

GOVERNING LAW

Applicable law

This Consent To Share Form is drafted to comply with United Arab Emirates law. Key legislation includes:







Genie's Security Promise

Genie is the safest place to draft. Here's how we prioritise your privacy and security.

Your data is private:

We do not train on your data; Genie's AI improves independently

All data stored on Genie is private to your organisation

Your documents are protected:

Your documents are protected by ultra-secure 256-bit encryption

We are ISO27001 certified, so your data is secure

Organizational security:

You retain IP ownership of your documents and their information

You have full control over your data and who gets to see it