E-stores Processing of Customers’ Personal Data according to UAE Legislation: A Comparative Study

Dr Issa Ghassan Rabadi
Associate Professor of Civil Law
Faculty of Law, University of Science and Technology
Fujairah, UAE

Abstract:

In light of the fast-paced and ever-changing world of technology, which is expected to witness technological revolutions based on artificial intelligence and the fifth generation of the Internet, this technology needs data, and here lies the danger that manifests itself in preserving personal data in order to protect it from violating the privacy of the person concerned by processing it.
Processing personal data is a double-edged sword. Despite the great positivity and advantages it provides, it affects many people’s rights and freedoms, so there is no control that balances positivity and curbs violations. Therefore, most countries, including the United Arab Emirates, have begun issuing a law to protect personal data and establish Controls for processing it, as the UAE legislator issued the UAE Personal Data Protection Law No. (45) of 2021. E-stores are considered one of the forms of modern technology that provides people with the advantage of shopping and providing services electronically, but in order for these stores to continue serving and to develop themselves, they need the personal data of customers who shop through them in order to process them and then employ them for their service.
In addition to what we mentioned above, processing personal data is considered a violation of the privacy of the person concerned, the law has established substantive and procedural controls that analyze the legality of processing this personal data, meaning that online stores now have a legal right that grants them the processing of customers’ personal data under conditions and there is a specific purpose that serves him or the customer.
Some of the most important conditions for processing personal data are obtaining the consent of their owner, that there be a clear purpose for the processing, and that the data be processed for a specific period of time. The law stipulates a set of rights for the customer that he can request from the online store.
Keywords: Personal data, processing, controller, processor, online store, and customer.

Read Full PDF Text (Arabic)