1. Who we are
The Legal Affairs Department (LAD) of the Government of Dubai is the data controller for the Continuing Legal Professional Development (CLPD) portal. We can be contacted at clpd@legal.dubai.gov.ae.
2. What we collect
- Lawyers / practitioners: name, lawyer / bar number, email, phone, firm affiliation, Emirates ID (where provided), and your CLPD points balance + course attendance history.
- Firm compliance officers, providers, LAD staff: name, work email, role, organisation.
- Operational data: sign-in audit log, accreditation applications, attendance records, and credit transactions.
- Technical data: IP address and browser user-agent for security logging.
3. Lawful basis
We process this data to administer the CLPD scheme under our statutory mandate, to verify identity for sign-in, and to maintain the compliance record each practitioner is legally required to hold.
4. How we use it
- Authenticate sign-in and protect accounts.
- Record attendance against accredited courses and award CLPD points.
- Notify applicants of accreditation decisions and surface obligation status.
- Produce anonymised compliance statistics for the LAD Director General.
- Investigate suspected fraud (e.g. duplicate certificates).
5. Sharing
We do not sell personal data. We share data only with: (a) the firm compliance officer of your registered firm, restricted to that firm's lawyers; (b) accredited training providers, restricted to the attendees of their courses; (c) the LAD reviewer assigned to your accreditation; and (d) IT contractors bound by confidentiality clauses.
6. Where data is stored
The CLPD portal currently runs on Microsoft Azure infrastructure. Backups are encrypted at rest. Hosting region is subject to government data-residency policy and may be relocated to a UAE region following review.
7. Retention
- Active lawyer + firm records: retained for the duration of registration plus 10 years.
- Audit / sign-in log: 365 days, then pruned.
- Password reset tokens: 60 minutes, then deleted on use or expiry.
- Accreditation applications and attendance records: 10 years (regulatory).
8. Your rights
You may request a copy of the personal data we hold about you, ask us to correct inaccuracies, or ask us to delete data that is no longer required (subject to the regulatory retention above). Email clpd@legal.dubai.gov.ae.
9. Security
Passwords are stored hashed with bcrypt and never in plaintext. All sign-in sessions expire after 8 hours. All API traffic is encrypted (HTTPS).
10. Cookies
We use a small number of essential cookies / browser-storage entries to keep you signed in and remember your preferences. No third-party analytics or advertising cookies are loaded.