This dossier contains 34 indexed evidence records connected to Abu Dhabi Global Market (ADGM). Use the filters to inspect status, instrument type, and topic coverage—including deepfakes, synthetic media, AI-generated content, detection, and KYC—without treating a summary as a legal conclusion.
34indexed records
1source files
10indexed topics
Evidence boundary
A registry record is not a legal opinion.
The cards below reproduce the registry's evidence boundary. A partial record stays partial, and an absent field is shown as not recorded. This informational research is not legal advice or a compliance certification. Detection results, labels, watermarks, provenance records, and biometric or KYC controls do not prove authenticity or compliance.
Source files in this dossier
research/uae-adgm.md
Indexed evidence
Regulation records
Showing 34 of 34 records
Repealed or withdrawn, partial
*Data Protection Regulations 2021*.
ADGM regulation.
CitationNot recorded in registry
Covered actorsNot recorded in registry
Neutral effect or obligation summary
Use a lawful basis for processing apply the data-protection principles give notices and support data-subject rights maintain appropriate technical and organisational security use controller-processor contracts maintain records of processing appoint a DPO where required perform a DPIA for processing likely to result in high risk notify qualifying personal-data breaches and transfer data outside ADGM only through an adequacy decision, appropriate safeguard, or permitted derogation.
DatesNot recorded in registry
Verified date
Evidence boundary
Direct evidence section in the cited Markdown dossier; official URLs are reproduced from that section.
Synthetic MediaArtificial IntelligenceIdentity And KycBiometricsFraud And ImpersonationPrivacy And Data Protection
*Lawful Basis For Processing Personal Data And Special Categories Of Personal Data*; *Appropriate Policy Document*; and ODP DPIA guidance.
Official explanatory materials and template.
CitationNot recorded in registry
Covered actors
ADGM controllers and processors
especially entities processing biometric, genetic, health, criminal-conviction, or other special-category data, and controllers using profiling or automated decisions.
Neutral effect or obligation summary
Biometric data used for identification requires an Article 5 lawful basis and an Article 7(2) special-category condition. Where the condition requires it, maintain an Appropriate Policy Document. Conduct and document a DPIA before high-risk processing, consult the DPO where appointed, and provide meaningful information about automated decision-making and its consequences.
DatesNot recorded in registry
Verified date
Evidence boundary
Direct evidence section in the cited Markdown dossier; official URLs are reproduced from that section.
*Guidance on the Data Protection Regulations 2021 Part 6: International Transfers*; *ADGM Data Protection Adequate Jurisdictions*; *ADGM Standard Contractual Clauses*; and *ADGM Addendum to the EU Standard Contractual Clauses*.
Regulation-backed guidance, adequacy decision/list, contractual safeguards and templates.
CitationNot recorded in registry
Covered actors
ADGM exporters, controllers, processors, group companies, vendors and recipients outside ADGM.
Neutral effect or obligation summary
Assess necessity treat a transfer as processing use a designated adequate jurisdiction, appropriate safeguard such as ADGM SCCs, approved EU SCC Addendum, binding corporate rules, or a permitted derogation address onward transfers and contractual/security safeguards.
DatesNot recorded in registry
Verified date
Evidence boundary
Direct evidence section in the cited Markdown dossier; official URLs are reproduced from that section.
*Money Laundering and Terrorist Financing Risk Assessment of ADGM Legal Persons and Arrangements (LPA) — 2026 Update*.
Official risk assessment and supervisory policy material; not legislation, a rulebook or a licence condition by itself.
CitationNot recorded in registry
Covered actors
ADGM legal persons and arrangements, registry and supervisory functions, financial institutions, DNFBPs, VASPs and other stakeholders assessing ADGM structures.
Neutral effect or obligation summaryNot recorded in registry
DatesNot recorded in registry
Verified date
Evidence boundary
Direct evidence section in the cited Markdown dossier; official URLs are reproduced from that section.
*ADGM RA Monitoring and Enforcement* and the *Enforcement and Disqualification Manual*.
Official enforcement framework and regulatory-action materials.
CitationNot recorded in registry
Covered actors
ADGM legal entities, commercial-license holders, licensed DNFBPs, auditors, insolvency practitioners and persons subject to ADGM commercial legislation. Under an agreement with FSRA, the RA monitors AML compliance by ADGM-licensed DNFBPs such as company service providers.
Neutral effect or obligation summaryNot recorded in registry
DatesNot recorded in registry
Verified date
Evidence boundary
Direct evidence section in the cited Markdown dossier; official URLs are reproduced from that section.
*Anti-Money Laundering and Sanctions Rules and Guidance (AML)* / *Anti-Money Laundering and Sanctions Rulebook (AML)*.
FSRA rulebook and guidance.
CitationNot recorded in registry
Covered actors
“Relevant Persons,” including FSRA Authorised Persons, Recognised Bodies, DNFBPs and other persons to the extent specified by the Rulebook
the applicable chapters depend on the person and activity.
Neutral effect or obligation summary
Risk-based AML/TFS/CPF systems and controls customer risk assessment identification and verification of customers and beneficial owners CDD and enhanced due diligence ongoing monitoring sanctions screening and freezing suspicious transaction/activity reporting record keeping governance, training, independent testing and cooperation with the FSRA/UAE FIU. The Rulebook expressly operates alongside UAE federal AML legislation.
DatesNot recorded in registry
Verified date
Evidence boundary
Direct evidence section in the cited Markdown dossier; official URLs are reproduced from that section.
Synthetic MediaIdentity And KycBiometricsFinancial Services
FSRA outsourcing, eKYC assurance and third-party cyber risk
Binding FSRA Rules, with separate rulebook guidance for interpretation and supervisory expectations.
CitationNot recorded in registry
Covered actors
Authorised Persons
Relevant Persons using outsourced CDD/eKYC
and third-party ICT or eKYC providers to the extent covered by the arrangement.
Neutral effect or obligation summary
An Authorised Person remains responsible for compliance when a function related to a Regulated Activity is outsourced, and the outsourced function is treated as carried out by the Authorised Person. The firm must perform due diligence, supervise the provider and address provider failures. Material outsourcing requires regulator notification, written contract, contingency planning, an outsourcing-risk programme and contract terms preserving information, premises access and cooperation with the FSRA. GEN 3.5.2 additionally requires third-party cyber due diligence, suitable contracts, provider incident notification/cooperation, continuing security verification and effective supervision. For eKYC, use of a service provider’s eKYC System is outsourcing the Relevant Person should assess reliability, independence, compliance and replaceability, and must perform periodic assurance assessments under AML 9.3.4.
DatesNot recorded in registry
Verified date
Evidence boundary
Direct evidence section in the cited Markdown dossier; official URLs are reproduced from that section.
Identity And KycFraud And ImpersonationFinancial Services
*Guidelines for Financial Institutions adopting Enabling Technologies*.
Joint non-binding guidelines.
CitationNot recorded in registry
Covered actors
Institutions licensed and supervised by one of the four Supervisory Authorities that use or intend to use APIs, cloud computing, biometrics, big-data analytics, AI or DLT.
Neutral effect or obligation summaryNot recorded in registry
DatesNot recorded in registry
Verified date
Evidence boundary
Direct evidence section in the cited Markdown dossier; official URLs are reproduced from that section.
Artificial IntelligenceIdentity And KycBiometricsPrivacy And Data ProtectionFinancial Services
FSRA financial-services perimeter and status verification
Binding FSMR and FSRA Rules, supported by authorisation guidance and the public register.
CitationNot recorded in registry
Covered actors
Persons carrying on a Regulated Activity in or from ADGM by way of business, Authorised Persons, Recognised Bodies, Approved Persons and other categories defined by FSMR and the Rulebooks.
Neutral effect or obligation summaryNot recorded in registry
DatesNot recorded in registry
Verified date
Evidence boundary
Direct evidence section in the cited Markdown dossier; official URLs are reproduced from that section.
Synthetic MediaArtificial IntelligenceIdentity And KycFraud And ImpersonationPlatform Safety And ContentFinancial ServicesProvenance And Labeling
FSRA enforcement powers and financial-crime actions
Official enforcement framework and action register.
CitationNot recorded in registry
Covered actors
Persons and entities regulated by FSRA-administered Regulations and Rules.
Neutral effect or obligation summary
Cooperate with FSRA complaints, investigations, supervision and remediation comply with FSMR and relevant rulebooks, including AML, cyber, conduct and prudential requirements.
DatesNot recorded in registry
Verified date
Evidence boundary
Direct evidence section in the cited Markdown dossier; official URLs are reproduced from that section.
*Federal Decree by Law No. (45) of 2021 Concerning the Protection of Personal Data*.
Federal decree-law.
CitationNot recorded in registry
Covered actorsNot recorded in registry
Neutral effect or obligation summary
Lawful and fair processing purpose and data-minimisation controls data-subject rights security breach and governance duties DPO appointment in specified cases restrictions and conditions for cross-border transfers rules for sensitive and biometric data.
DatesNot recorded in registry
Verified date
Evidence boundary
Direct evidence section in the cited Markdown dossier; official URLs are reproduced from that section.
Artificial IntelligenceIdentity And KycBiometricsPrivacy And Data Protection
*Federal Decree by Law No. (46) of 2021 on Electronic Transactions and Trust Services*.
Federal decree-law, supplemented by executive regulations and penalties resolution.
CitationNot recorded in registry
Covered actors
Electronic records, signatures, trust-service providers, accredited trust services and parties relying on electronic transactions in the federal sphere.
Neutral effect or obligation summaryNot recorded in registry
DatesNot recorded in registry
Verified date
Evidence boundary
Direct evidence section in the cited Markdown dossier; official URLs are reproduced from that section.
Federal Decree by Law No. (10) of 2025 and Cabinet Resolution No. (134) of 2025: AML/CFT/CPF
Federal decree-law and executive regulation.
CitationNot recorded in registry
Covered actors
Financial institutions, DNFBPs, virtual asset service providers, non-profit organisations and supervisory authorities.
Neutral effect or obligation summary
Risk assessment identify and verify customers and beneficial owners from reliable and independent sources ongoing monitoring suspicious-activity reporting sanctions and proliferation-financing controls record keeping and risk assessment for new products, service-delivery mechanisms and new/developing technologies.
DatesNot recorded in registry
Verified date
Evidence boundary
Direct evidence section in the cited Markdown dossier; official URLs are reproduced from that section.
Federal decree-law, executive regulation and sanctions resolution.
CitationNot recorded in registry
Covered actors
Every person within the statutory scope who collects, retains, analyses, classifies, uses, exchanges, protects or manages KYC data, or issues a KYC report
the platform company, data providers, users, customers and CBUAE are central actors.
Neutral effect or obligation summary
Establish/manage the KYC platform supply and protect KYC data use it only for authorised purposes obtain client approval before requesting a KYC report maintain confidentiality and security follow CBUAE controls provide complaint/correction mechanisms and comply with personal-data law.
DatesNot recorded in registry
Verified date
Evidence boundary
Direct evidence section in the cited Markdown dossier; official URLs are reproduced from that section.
Identity And KycPlatform Safety And ContentFinancial Services
*Emerging Money Laundering, Terrorist Financing and Proliferation Financing Risks and Trends in the Financial Sector* (official joint/supervisory paper).
Official risk paper / supervisory material.
CitationNot recorded in registry
Covered actors
LFIs, insurance and other covered financial-sector institutions, including entities using remote onboarding and biometrics.
Neutral effect or obligation summaryNot recorded in registry
DatesNot recorded in registry
Verified date
Evidence boundary
Direct evidence section in the cited Markdown dossier; official URLs are reproduced from that section.
Synthetic MediaArtificial IntelligenceIdentity And KycBiometricsFinancial Services
DFSA Relevant Persons and their officers, employees and agents in DIFC.
Neutral effect or obligation summary
Risk-based AML/CTF/CPF and sanctions controls, CDD, digital onboarding, outsourcing, governance, reporting and annual AML returns read with federal AML law.
DatesNot recorded in registry
Verified date
Evidence boundary
Direct evidence section in the cited Markdown dossier; official URLs are reproduced from that section.
DIFC Authorised Firms and relevant regulated entities.
Neutral effect or obligation summary
Maintain a proportionate framework to identify, mitigate, detect, respond to and recover from cyber incidents board/senior-management awareness third-party and dependency assessment reporting and supervisory cooperation.
DatesNot recorded in registry
Verified date
Evidence boundary
Direct evidence section in the cited Markdown dossier; official URLs are reproduced from that section.
all institutions supervised by the four authorities for the joint guidelines.
Neutral effect or obligation summaryNot recorded in registry
DatesNot recorded in registry
Verified date
Evidence boundary
Direct evidence section in the cited Markdown dossier; official URLs are reproduced from that section.
Synthetic MediaArtificial IntelligenceIdentity And KycBiometricsFraud And ImpersonationPrivacy And Data ProtectionCybersecurityPlatform Safety And ContentFinancial ServicesProvenance And Labeling
