The UAE Federal Decree-Law on the Protection of Personal Data (PDPL), which came into force in 2022, establishes specific requirements for the processing of sensitive personal data — including health data. Looms has completed a comprehensive implementation programme to ensure full compliance with the PDPL as it applies to our platform and the health data we process.
Key compliance measures
PDPL compliance at Looms covers the full lifecycle of health data processing:
- Lawful basis documentation for every category of data processing on the platform
- Consent collection and management for research data use
- Data subject rights implementation: access, rectification, erasure, objection and portability
- Data processing agreements with all UAE-based and international sub-processors
- Cross-border data transfer controls ensuring UAE patient data does not leave the country without legal basis
- Mandatory breach notification procedures and a designated Data Protection Officer
Our DPO
Looms has appointed a dedicated Data Protection Officer responsible for PDPL compliance monitoring, staff training and liaison with the UAE Data Office. The DPO is accessible to patients with data rights requests at privacy@looms.app.