meta_id 3251746

On June 18, 2026, the Dubai International Financial Centre (DIFC) launched a public consultation on proposed amendments to its Data Protection Regulations (DP Regulations). The amendments seek to strengthen the regulatory framework by enhancing requirements for systems processing personal data in an artificial intelligence (AI) native jurisdiction, while clarifying certification obligations and the role of the Autonomous Systems Officer (ASO). The DP Regulations were last updated in 2023 to introduce safeguards for advanced, AI-enabled systems. The proposed amendments build on this foundation by enhancing Regulation 10 to strengthen expectations around safe, ethical, and privacy-by-design development.The amendments provide greater clarity on certification requirements and the ASO role, alongside other consequential updates to support robust and future-ready data protection governance. Key proposals and regulatory changes include: Embedding "safety" into AI systems: Updates to Regulation 10 introduce "Safety" as a fundamental base concept for responsible system design, establishing mandatory privacy-by-design and default measures for processing personal data in AI-native environments. Defining the ASO role: The framework provides detailed obligations and skills required for the Autonomous Systems Officer (ASO) role, paving the way for a first-of-its-kind ASO certification scheme. New commissioner powers (Regulation 11): A new regulation empowers the Commissioner to officially recognize and publish external accreditation and certification frameworks (such as the Global Cross Border Privacy Rules). The consultation period runs for 30 days, with comments due by July 18, 2026 .Responses should be submitted through the DIFC's official consultation portal. The DIFC expects to publish feedback on responses following the consultation period's closure.