The European Union’s General Data Protection Regulation (GDPR) was introduced as the new legislation on May 25, 2018, to protect the personal data. Ever since the legislation came into effect, the corporates in Europe have been trying to comply with its various legal requirements. Article 3(1) of the GDPR is applicable to the organizations that have a physical presence inside the EU and are engaged in the processing of personal data of EU data subjects. Article 3(2) extends this territorial scope to include non-EU based organizations that are not physically established in the EU.

Non-EU Based Organizations under the Purview of GDPR

These basically include entities that are either ‘controllers’ or ‘processors’ who are engaged in the processing of the personal data of data subjects in the EU. The processing activities should relate to the following:?

• ‘Offering of goods or services’ to individuals residing in the EU irrespective of whether the payment is required (targeting)
• Instances where the behaviour of European data subjects residing in the EU is monitored (monitoring).

GDPR application by way of targeting

There is no clear guidance as to what constitutes an ‘offering of goods or services’. Each case would have to be analysed separately on a standalone basis. Normally, for GDPR to be applicable it is required that there should be some active direction of activities towards data subjects within the EU. The mere availability of website or online advertising would not attract GDPR compliance. Additional aspects to be considered for targeting of data subjects would need to include:

• Contact details in the EU
• Availability of a website in more than one European language
• High probability of making payments in the Euro currency
• Usage of any EU domain name
• References to or from EU clients

GDPR application by way of monitoring

With respect to monitoring of behaviours of EU subjects, in order for GDPR to be applicable, the following factors should be considered:

• Gathering location data
• Allowing EU data subjects to use a social network account
• Tracking the online activities of the individuals to know more about their behaviour, personal preferences, and attitudes. A perfect example of this can be the usage of website cookies or social media plug-ins that monitor the online presence of an individual.

GDPR indirect application to non-EU businesses

The provisions of GDPR will also be applicable to non-EU businesses (processor) carrying out processing activities on behalf of an EU business (controller). The Data Processing Agreements between such controller and processor should account for the following matters such that the processor:

• Acts on the documented instructions of the controller and only then processes the personal data of the subject
• Ensures complete confidentiality by the authorized person responsible for processing the personal data
• Unless required by the GDPR provisions, does not transfer the personal data outside the EU
• Without the prior documented authorisation of the controller, does not engage another processor
• Allows for and contributes to audits, including assisting the controller in inspections carried out by him

Key Takeaways

The GDPR was purposely drafted to make sure that is applied to EU-based as well as businesses based outside of the EU that engage in handling the personal data of the EU subjects. If you have an organization outside the EU but are acting as a controller or a processor, then in all probabilities, you could be covered by the GDPR provisions. Article 3(2) has extended the scope of the territory and GDPR rules could affect your business as well. If so, you must make it as your priority to begin the implementation of a GDPR compliance roadmap.

The UAE’s Ministry of Finance (MoF) has just got into a pact with Saudi Arabia recently to avoid Double Taxation and also prevent any tax dodging in terms of taxes on income and capital. This agreement was signed at Jeddah at the Saudi Ministry of Finance headquarters. This step shows UAE’s eagerness to reinforce collaboration in matters related to tax and thereby further improve economic relations with its neighbour.

During the meeting, the ministers also spoke about various other topics like the application of the two GCC unified agreements related to VAT and selective taxation. To ensure smooth functioning of the laws, a team would be put in place to supervise any problems and execute all the steps.

The Double Taxation Agreement actually demonstrates the efforts made to improve various new opportunities of investment, support and enhance imports and exports, and ensure that there is a free flow of trade and also investment. It will also enhance the capital flow, the exchange of services, and bring in more economic diversification while making the partnership between the UAE and Saudi Arabia stronger. This makes company formation in UAE and also company formation in Saudi Arabia much easier.

He explained that UAE is committed to doing more agreements dealing with avoidance of double taxation, and the imperative point out of this is the information exchange for the purpose of tax and adopting the best-in-class standards in terms of transparency and information exchange. The purpose is to achieve the goal of justice for tax-payers and organizations, protect the country’s economy, and also execute the decisions of Global Forum on Transparency and Exchange of Information for Tax Purposes, which enhances UAE’s spot as one of the top international fiscal and commerce centers.

Talking about some statistics, the transactions into real estate by Saudi nationals done in the UAE in the year 2016 touched the129.9 billion dirhams mark. While the volume of licenses granted for doing financial activities to Saudis residing in the UAE touched 10,896 in the year 2016. The total investments of the Saudi citizens and the Saudi banks located in the UAE were about 18.66 billion dirhams in 2016, whereas the trade figures between these two nations were plotted at 35.11 billion UAE dirhams. Did you know that Saudi Arabia stands third in the world and tops the charts in the Arab countries when it comes to UAE exports? It accounts for almost 45% of its imports from the GCC and around 28% of UAE’s imports that come from the Arab countries.

MoF had also signed some Agreements on the Avoidance of Double Taxation on income tax earlier with around 115 countries. The Ministry also stated its commitment towards the implementation of high levels of financial transparency and exchange of information for tax-related issues, which is in line with the G20 (Group of 20) decisions and the provisions done for Avoidance of Double Taxation agreements with other countries.