Cloud services are not expressly regulated in the Dubai International Financial Centre. As such, there are no standalone regulations that regulate outsourcing and that would dictate what types of functions can be outsourced or what data can be stored with an outsourced service provider.

Dubai Financial Services Authority ("DFSA") Rulebook:

The general rules contained in the DFSA Rulebook contain requirements relating to material outsourcing. These rules are reinforced by the provisions of the DFSA's Regulatory and Policy Sourcebook. Accordingly, it will depend on the systems on which it will be hosted to determine whether the rules will apply.

Guidelines for Financial Institutions Adopting Enabling Technologies:

The Central Bank of the UAE, along with the DFSA and other UAE financial authorities, such as the Securities and Commodities Authority and the Financial Services Regulatory Authority of Abu Dhabi Global Market, jointly issued best practice guidelines relating to digitalization in the financial services sector entitled the "Guidelines for Financial Institutions Adopting Enabling Technologies" ("Guidelines").

The Guidelines apply to all financial institutions licensed and supervised by the DFSA that are using, or intend to use, among other technologies, cloud computing solutions. Financial institutions are expected to consider applying the Guidelines to their business activities in a manner that reflects the size and complexity of the relevant financial institution and the nature, scope, risk level, complexity and materiality of their activities.