Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →Implements compliance with the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (UAE PDP Law) and its Executive Regulations. Covers data controller and processor obligations, data subject rights, cross-border transfer requirements, sensitive data processing, and UAE Data Office enforcement. Keywords: UAE PDP, Federal Decree-Law 45, UAE Data Office, DIFC, ADGM, cross-border transfer.
.claude/skills/thomasmoreai-uae-pdp-law/SKILL.md| Test case | Without → With | Effect | Δ tokens | Δ turns |
|---|---|---|---|---|
| case-01 | ✗→✓ | ▲ Improved | 30% | 0% |
| case-02 | ✗→✓ | ▲ Improved | 8% | 0% |
| case-03 | ✗→✓ | ▲ Improved | 35% | 0% |
| case-08 | ✗→✓ | ▲ Improved | 46% | 0% |
| case-10 | ✗→✓ | ▲ Improved | 123% | 0% |
Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the UAE PDP Law) was issued on 20 September 2021 and entered into force on 2 January 2022, with a compliance grace period. The Executive Regulations were issued by Cabinet Decision No. 111 of 2023, published in the Official Gazette on 23 October 2023, and companies were given until 1 January 2025 to achieve compliance. The UAE Data Office (established under the law) is the supervisory authority responsible for enforcement.
The UAE PDP Law is the first comprehensive federal data protection law in the UAE. It is important to note that the UAE also has separate data protection regimes in the financial free zones: the Dubai International Financial Centre (DIFC) Data Protection Law No. 5 of 2020 and the Abu Dhabi Global Market (ADGM) Data Protection Regulations 2021. These free zone laws operate independently of the federal law.
| UAE PDP Law Term | GDPR Equivalent | Definition | |-----------------|----------------|------------| | Personal Data | Personal data | Any data related to an identified or identifiable natural person (Article 1) | | Sensitive Personal Data | Special category data | Data revealing racial or ethnic origin, political opinion, religious beliefs, criminal records, biometric data, health data, genetic data (Article 1) | | Controller | Controller | Any person who determines the purposes and means of personal data processing (Article 1) | | Processor | Processor | Any person who processes personal data on behalf of the controller (Article 1) | | Data Subject | Data subject | The natural person to whom personal data relates (Article 1) |
The controller may process personal data only where:
Processing of sensitive personal data is prohibited except where:
Transfer of personal data outside the UAE is permitted where:
The Executive Regulations specify the criteria for adequacy assessment and the process for approving standard contractual clauses.
The UAE Data Office may:
The UAE PDP Law does not apply to:
| Case | Status | Duration (ms) | Turns | Tokens | Tool calls | ||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Without | With | Δ | Without | With | Δ | Without | With | Δ | Without | With | Δ | ||
case-01 | fail→pass | 19,731 | 20,569 | +4% | 1 | 1 | 0% | 3,574 | 4,648 | +30% | 0 | 0 | — |
case-02 | fail→pass | 31,831 | 27,048 | -15% | 1 | 1 | 0% | 5,711 | 6,169 | +8% | 0 | 0 | — |
case-03 | fail→pass | 22,169 | 17,201 | -22% | 1 | 1 | 0% | 3,427 | 4,626 | +35% | 0 | 0 | — |
case-04 | pass→pass | 16,006 | 16,787 | +5% | 1 | 1 | 0% | 2,869 | 4,454 | +55% | 0 | 0 | — |
case-05 | pass→pass | 17,485 | 13,203 | -24% | 1 | 1 | 0% | 3,008 | 4,024 | +34% | 0 | 0 | — |
case-06 | pass→pass | 15,085 | 18,531 | +23% | 1 | 1 | 0% | 2,690 | 3,012 | +12% | 0 | 0 | — |
case-07 | fail→fail | 15,006 | 18,206 | +21% | 1 | 1 | 0% | 2,633 | 4,606 | +75% | 0 | 0 | — |
case-08 | fail→pass | 16,202 | 17,476 | +8% | 1 | 1 | 0% | 3,110 | 4,528 | +46% | 0 | 0 | — |
case-09 | pass→pass | 8,333 | 4,479 | -46% | 1 | 1 | 0% | 1,493 | 2,110 | +41% | 0 | 0 | — |
case-10 | fail→pass | 7,033 | 5,520 | -22% | 1 | 1 | 0% | 1,078 | 2,401 | +123% | 0 | 0 | — |
case-11 | fail→pass | 7,679 | 5,804 | -24% | 1 | 1 | 0% | 1,437 | 2,582 | +80% | 0 | 0 | — |
case-12 | pass→pass | 7,215 | 4,625 | -36% | 1 | 1 | 0% | 1,050 | 2,173 | +107% | 0 | 0 | — |
case-13 | pass→pass | 11,908 | 14,723 | +24% | 1 | 1 | 0% | 2,091 | 3,746 | +79% | 0 | 0 | — |
case-14 | fail→pass | 8,396 | 3,979 | -53% | 1 | 1 | 0% | 1,596 | 2,161 | +35% | 0 | 0 | — |
case-15 | fail→pass | 5,375 | 5,234 | -3% | 1 | 1 | 0% | 1,141 | 2,375 | +108% | 0 | 0 | — |
case-16 | pass→pass | 7,832 | 7,836 | +0% | 1 | 1 | 0% | 1,127 | 2,647 | +135% | 0 | 0 | — |
case-17 | fail→pass | 8,317 | 3,934 | -53% | 1 | 1 | 0% | 1,457 | 2,127 | +46% | 0 | 0 | — |
case-18 | pass→pass | 13,921 | 13,714 | -1% | 1 | 1 | 0% | 2,538 | 3,945 | +55% | 0 | 0 | — |
case-19 | pass→pass | 10,855 | 7,277 | -33% | 1 | 1 | 0% | 1,812 | 2,505 | +38% | 0 | 0 | — |
case-20 | pass→pass | 9,290 | 6,775 | -27% | 1 | 1 | 0% | 1,650 | 2,614 | +58% | 0 | 0 | — |
case-21 | fail→pass | 12,519 | 5,665 | -55% | 1 | 1 | 0% | 2,362 | 2,555 | +8% | 0 | 0 | — |
case-22 | pass→pass | 7,188 | 8,552 | +19% | 1 | 1 | 0% | 1,390 | 2,808 | +102% | 0 | 0 | — |
DecimalAI ran this skill against gemini-3.6-flash twice over the same eval suite — once with the skill loaded and once without — and compared the two runs case by case. 22 cases were attempted. The headline lift of +45 percentage points is the difference between those two pass rates over the 22 comparable cases.
Without the skill loaded, the model failed this case. With it loaded, the same prompt on the same model passed. This is one improved case from the latest verified run; every case, including any that regressed, is in the table above.
Other measured skills in the registry, with their headline benchmark lift.