Does Regulation 10 apply to your system?
Six gates, hardcoded from the enacted text of the DIFC Data Protection Regulations and DP Law No. 5 of 2020. Every question and every obligation carries its clause — expand any citation to read the verbatim provision. Same answers, same verdict, every time.
Does the system process Personal Data — or is Personal Data used to enable its learning?
Training data counts. Staff and contractor data counts. A system that resembles an identifiable natural person (an avatar or persona) is itself treated as processing that person's data, even where no other Personal Data is touched.
RULESET: DIFC DP Regulations Consolidated No. 2 (Reg 10, enacted 1 Sep 2023) · DP Law No. 5 of 2020 (Jul 2025 consolidation). DETERMINISTIC — SAME ANSWERS, SAME RESULT, EVERY TIME. RUNS ENTIRELY IN YOUR BROWSER; NOTHING IS TRANSMITTED OR STORED SERVER-SIDE. CONSULTATION PAPER NO. 3 OF 2026 (CLOSES 18 JUL 2026) PROPOSES AMENDMENTS TO REGULATION 10 AND A NEW REGULATION 11 — THIS INSTRUMENT ENCODES THE ENACTED TEXT AND WILL BE VERSIONED WHEN AMENDMENTS TAKE EFFECT. STRUCTURED DRAFTING SUPPORT, NOT LEGAL ADVICE.