Personal Data Protection Law · Federal Decree-Law 45 of 2021
Article 6
English translation
Terms of Consent to Data Processing
1. To be considered, the consent of the Data Subject to the processing of date shall require the following: a. The Controller shall be able to prove the consent of the Data Subject in the event that the processing of Personal Data is based on the consent of the Data Subject. b. The Consent shall be prepared in a clear, simple, unambiguous and easily accessible manner, whether in writing or electronically. c. The Consent shall include the Data Subject's right to withdraw it easily.
2. The Data Subject may, at any time, withdraw their consent to the processing of Personal Data. Such withdrawal of consent shall not affect the legality of the processing based on the given consent before withdrawing it.
Official translation, as published by the portal.
Official Arabic text
شروط الموافقة على معالجة البيانات
.1 يشترط للاعتداد بموافقة صاحب البيانات على معالجتها ما يلي: أ. أن يكون المتحكم قادرًا على إثبات موافقة صاحب البيانات في حال كانت المعالجة مبنية على موافقة صاحب البيانات لمعالجة بياناته الشخصية. ب. أن تكون الموافقة معدة بطريقة واضحة وبسيطة وغير مبهمة وسهلة الوصول إليها سواء كانت كتابية أو إلكترونية. ج. أن تتضمن الموافقة ما يفيد حق صاحب البيانات بالعدول عنها، وأن يكون إجراء العدول بطريقة سهلة.
.2 يجوز لصاحب البيانات العدول في أي وقت عن موافقته على معالجة بياناته الشخصية، ولا يؤثر هذا العدول على قانونية ومشروعية المعالجة المبنية على الموافقة التي أعطيت قبل العدول عنها.
What it means when you sign
This article sets the conditions for consent to personal data processing to count. The controller must be able to prove the data subject's consent where the processing is based on it. The consent must be prepared in a clear, simple, unambiguous and easily accessible way, in writing or electronically. It must include the data subject's right to withdraw it easily.
The data subject may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out on the basis of the consent before it was withdrawn.
When you are about to sign a contract that includes consent to the use of your personal data, this article means the consent wording should be clear and simple, and it must tell the data subject that consent can be withdrawn easily. A clause that buries consent in dense text, uses vague wording, or gives no way to withdraw may run into this article. A clause that says consent cannot be withdrawn, or that withdrawal cancels what was done before, conflicts with the article's text. The controller is the one who must be able to prove that consent was given.
In Fahm reports this article usually sits under: Hidden wording
Related articles
- Article 1This is a definitions article for the personal data protection law.
- Article 2Cited in Fahm reportsThis article sets out who and what the personal data protection law applies to, and what it leaves out.
- Article 3This article gives the Data Bureau a power to exempt some establishments from the personal data protection requirements.
- Article 4Cited in Fahm reportsThis article sets the starting rule that personal data may not be processed without the consent of its owner.
- Article 5Cited in Fahm reportsThis article sets the controls that personal data processing must follow.
- Article 7This article lists the general obligations of the controller, the party that decides how and why personal data is processed.