Synthetic Data Framework
United Arab Emirates · Framework · Digital Dubai
Our summary
Digital Dubai launched a framework guiding organizations on using artificially generated data to support artificial intelligence applications while protecting privacy. The framework provides practical guidance for data leaders and scientists on creating and implementing synthetic data that maintains statistical properties of original data without revealing individual identities. It includes a sandbox experimental environment and implementation guidelines to help government and private sector entities adopt this approach for safer data analysis and machine learning.
Written by the Index in our own words. It is not legal advice; the official text is the authority.
Inside this policy
Every section of this policy in order. Our notes summarise each one in plain language and do not quote the official text, which is the authority.
Drafted by the Index An automated summary of the official text, not yet reviewed by a person.Reviewed Checked by a person against the official text.
4 sections
Jump to a chapter
Privacy challenges and synthetic data
Describes how privacy regulations worldwide created obstacles for using real personal data in AI and machine learning, leading to synthetic data as an ethical solution that preserves privacy while maintaining statistical integrity and predictive power.
Framework overview and applications
A white paper and framework guide describes how artificially generated data can support data-intensive applications such as artificial intelligence, targeting both data leaders and scientists in Dubai. The framework helps leaders understand the benefits of creating data while maintaining privacy, and provides scientists with technical details about privacy-protection methods and evidence of how this approach achieves both privacy safeguards and effective data analysis outcomes.
Sandbox testing and validation
Digital Dubai established a test environment using thousands of traffic accident records to validate that synthetic data maintains confidentiality while enabling advanced analysis more efficiently than traditional de-identification methods.
Implementation and coordination
Digital Dubai will conduct training seminars and workshops for government employees on the synthetic data framework, while the Data and Artificial Intelligence Committee oversees efforts to enhance data use and exchange across Dubai's government entities.
Controls
What this policy requires, forbids, grants or penalises, one control at a time and in our own words. Each control links to the official text, which is the authority. This is not legal advice.
Drafted by the Index Drafted automatically from the official text, not yet reviewed by a person.Reviewed Checked by a person against the official text.
Themes covered 6 of 35
Choose a theme to see only its controls. About the themes
Risk and scope 0 of 4
- Risk classification, not covered
- Prohibited practices, not covered
- Risk management system, not covered
- Impact assessment, not covered
Data and privacy 1 of 4
- Data subject rights and consent, not covered
- Cross-border data transfer, not covered
- Copyright and training data, not covered
Transparency and records 1 of 4
- Labelling of synthetic content, not covered
- Technical documentation, not covered
- Record keeping and logging, not covered
Technical safeguards 1 of 4
- Human oversight, not covered
- Accuracy, robustness and cybersecurity, not covered
- Bias and non-discrimination, not covered
Assurance and lifecycle 0 of 4
- Conformity assessment and certification, not covered
- Registration and notification, not covered
- Incident and breach reporting, not covered
- Post-market monitoring and corrective action, not covered
Rights and protected groups 0 of 4
- Automated decision-making rights, not covered
- Children and vulnerable groups, not covered
- Biometric identification and surveillance, not covered
- Whistleblowing, complaints and redress, not covered
Roles and organisation 3 of 6
- Supply chain and provider-deployer duties, not covered
- General purpose and foundation models, not covered
- Public sector use and procurement, not covered
Enforcement and sectors 0 of 5
- Enforcement, penalties and regulators, not covered
- Sector rules: health, not covered
- Sector rules: finance and insurance, not covered
- Sector rules: employment, not covered
- Sector rules: education, not covered
The full list of controls could not be loaded, so only the first 5 are shown.
Framework overview and applications 2 controls
- Applies to: Public authorityDrafted by the Index
Public authorities and data leaders should use synthetic data generation to support data-intensive AI applications while maintaining both privacy safeguards and analytical effectiveness.
- ObligationApplies to: Public authorityDrafted by the Index
The framework should provide technical guidance on privacy-protection methods to enable scientists and practitioners to understand and implement synthetic data generation.
Sandbox testing and validation 1 control
- Applies to: Public authorityDrafted by the Index
Public authorities should validate synthetic data through sandbox testing to verify that it preserves confidentiality while supporting advanced analysis.
Implementation and coordination 2 controls
- ObligationApplies to: Public authorityDrafted by the Index
Digital Dubai should provide training seminars and workshops to government employees on how to use the synthetic data framework.
- ObligationApplies to: Public authorityDrafted by the Index
The Data and Artificial Intelligence Committee should oversee government efforts to enhance data use and sharing across Dubai's public sector entities.
Change history
No changes recorded since we began monitoring this policy.