Model Consent Form Template for the United Arab Emirates
Generate a bespoke document
What is a Model Consent Form?
This Model Consent Form has been developed to address the requirements of the UAE's evolving data protection landscape, particularly in light of Federal Decree Law No. 45 of 2021 regarding personal data protection. The document serves as a template for organizations seeking to obtain legitimate consent for data processing activities in the UAE. The Model Consent Form includes provisions for data collection, processing, storage, and transfer, while incorporating necessary safeguards and individual rights as required by UAE law. It is designed to be adaptable across various sectors while maintaining compliance with both mainland UAE and free zone regulations. The form is particularly relevant in contexts where explicit consent is required for personal data processing, including special category data handling and international transfers.
Frequently Asked Questions
Is a Model Consent Form legally binding under UAE Federal Decree Law No. 45 of 2021?
Yes, a properly executed Model Consent Form is legally binding in the UAE under Federal Decree Law No. 45 of 2021. The consent must be freely given, specific, informed, and unambiguous to be valid. Organizations must be able to demonstrate that valid consent was obtained for any personal data processing activities.
Can UAE authorities penalize my company if the Model Consent Form is missing or incomplete?
Yes, the UAE Data Protection Office can impose significant penalties for non-compliance with Federal Decree Law No. 45 of 2021. Missing or inadequate consent forms can result in fines up to AED 2 million for serious violations. Organizations must demonstrate they obtained proper consent before processing any personal data.
How does a Model Consent Form differ from a privacy policy under UAE law?
A Model Consent Form specifically obtains permission to process personal data, while a privacy policy explains how data is handled. Under UAE Federal Decree Law No. 45 of 2021, consent forms must be separate, clear documents that allow individuals to agree to specific data processing activities. Privacy policies provide general information about data practices but don't constitute consent.
Must Model Consent Forms be provided in Arabic to comply with UAE regulations?
While UAE Federal Decree Law No. 45 of 2021 doesn't explicitly mandate Arabic language requirements, consent must be clearly understandable to the data subject. For UAE residents who primarily speak Arabic, providing the form in Arabic ensures the consent is truly informed and legally valid.
How long should it take to prepare a compliant Model Consent Form for the UAE?
Creating a UAE-compliant Model Consent Form typically takes 1-3 business days with legal review. The timeline depends on the complexity of your data processing activities and specific industry requirements. Healthcare organizations may need additional time to comply with UAE Federal Law No. 7 of 2019 requirements.
Which common mistakes make Model Consent Forms invalid under UAE data protection law?
Common mistakes include using pre-ticked boxes, bundling consent with terms of service, and vague language about data use. UAE Federal Decree Law No. 45 of 2021 requires consent to be specific and unbundled. Many organizations also fail to include withdrawal mechanisms or don't specify data retention periods clearly.
Can individuals withdraw consent after signing a Model Consent Form in the UAE?
Yes, individuals have the right to withdraw consent at any time under UAE Federal Decree Law No. 45 of 2021. Your Model Consent Form must clearly explain how to withdraw consent and make the process as easy as giving consent. Organizations must stop processing personal data once consent is validly withdrawn, except where other legal grounds apply.
About the Model Consent Form
A Model Consent Form is a standardized legal document template that enables organizations in the United Arab Emirates to obtain valid consent for personal data processing activities. Under Federal Decree Law No. 45 of 2021, organizations must secure explicit consent from individuals before collecting, processing, or transferring their personal data, making this document essential for legal compliance.
When do you need this document?
You need a Model Consent Form whenever your organization processes personal data that requires explicit consent under UAE law. This includes collecting customer information for marketing purposes, processing employee data beyond employment requirements, handling medical records in healthcare settings, or transferring personal data to third parties. The form is particularly crucial when processing special category data such as health information, biometric data, or financial records. Organizations operating in free zones like DIFC must also use consent forms when transferring data across jurisdictions or engaging in cross-border data processing activities.
Key legal considerations
Your consent form must clearly specify the purpose of data collection and processing, ensuring individuals understand exactly how their information will be used. The document should identify all parties involved, including data controllers, processors, and any third-party recipients who may access the data. You must include provisions for data subjects to withdraw consent at any time, as this right is fundamental under UAE data protection law. The form should specify data retention periods and outline security measures for protecting personal information. When dealing with minors or individuals lacking legal capacity, you must obtain consent from legal guardians or authorized representatives. Electronic consent mechanisms are permissible under UAE Federal Law No. 1 of 2006, but you must ensure proper authentication and record-keeping.
Legal requirements in United Arab Emirates
Under Federal Decree Law No. 45 of 2021, your consent form must be freely given, specific, informed, and unambiguous. The law requires that consent requests be presented in clear, plain language that individuals can easily understand. You must provide your organization's full details, including license numbers and contact information for data protection inquiries. For healthcare organizations, UAE Federal Law No. 7 of 2019 and Federal Law No. 2 of 2019 impose additional requirements for medical consent forms, including specific provisions for electronic health information processing. If operating within DIFC jurisdiction, you must comply with DIFC Law No. 5 of 2020, which may have stricter requirements for international data transfers. The form must include mandatory disclosures about data subject rights, including access, rectification, erasure, and portability rights. You should also specify the legal basis for processing and provide clear opt-out mechanisms for direct marketing activities.
GOVERNING LAW
Applicable law
This Model Consent Form is drafted to comply with United Arab Emirates law. Key legislation includes:
Explore 208,390+ legal templates
Explore 208,390+ legal templates
Genie's Security Promise
Genie is the safest place to draft. Here's how we prioritise your privacy and security.
Your data is private:
We do not train on your data; Genie's AI improves independently
All data stored on Genie is private to your organisation
Your documents are protected:
Your documents are protected by ultra-secure 256-bit encryption
We are ISO27001 certified, so your data is secure
Organizational security:
You retain IP ownership of your documents and their information
You have full control over your data and who gets to see it