In the era of globalization and digitalization where a lot of data have become readily available and transferred across borders, the protection of data has become significantly important. The firms established in UAE must set obligations requiring that personal data be processed fairly, lawfully, securely and for a specified and legitimate purpose. While these data are important in terms of providing services, mismanagement of personal data (whether knowingly or unknowingly) could have significant impact including identity theft for individuals, card related fraud, penalties, reputational loss for the businesses, etc. In order to ensure adequate data protection, developing and implementing privacy policies across businesses is now a norm within any regulatory framework.