Obiter Dictum

The legal stories behind the things you didn't think needed a lawyer

UAE Data Protection Series

The PDPL Readiness Scorecard

Ten questions. Five minutes. A clear-eyed view of where your organisation stands against the UAE Personal Data Protection Law.

Expected compliance date · subject to change

Nothing you enter leaves your browser.

The UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) applies to almost every business that handles personal data in the Emirates — customers, employees, marketing lists, the lot. Most SMEs have not yet started. Answer honestly; the score is only useful if it hurts a little.

Answer all ten questions to see your result.
0/100

Your first three moves — in order

The full PDPL Readiness Kit is coming.

Gap-assessment worksheets, a processing-register template, vendor contract checklists and a breach-response runbook. Subscribers to Obiter Dictum get it first.

Subscribe to Obiter Dictum

This scorecard is a general awareness tool, not legal advice, and no lawyer–client relationship is created by using it. Your score reflects only your answers to ten deliberately simplified questions; a genuine readiness assessment requires review of your actual processing activities. Free-zone regimes (DIFC, ADGM) have their own data protection laws and are outside this tool's scope.

Privacy, practised as preached: this page stores nothing, sets no cookies, and sends no data anywhere. All scoring happens on your device.