While not identical, many similarities can be found in the data protection laws and regulations of the Dubai International Financial Centre (‘DIFC’), the Abu Dhabi Global Market (‘ADGM’) (each being financial services free zones in the United Arab Emirates) and the Qatar Financial Centre (‘QFC’) (being a financial services licensing authority in Qatar). In this article, we focus on obligations to provide information to data subjects when gathering personal data, and the rights of data subjects to object to the processing of personal data relating to them.