Kiersten Lucas


Kiersten is a Dubai-based partner and heads the Middle East employment, pensions and incentives team. She is one of the most pre-eminent employment law advisors in the UAE and is ranked as a 'Leading Individual' for UAE Employment Law by Chambers Global and The Legal 500 EMEA.

Kiersten is a sought-after advisor, speaker and author on all aspects of the employment lifecycle, including related data protection and privacy issues under the laws of the UK, the UAE federal laws, and the laws of the Dubai International Financial Centre ("DIFC") and Abu Dhabi Global Market ("ADGM") freezones.  Her work regularly involves matters spanning multiple jurisdictions.

As well as providing operational and strategic advice to clients on the employment aspects of data protection and privacy, Kiersten has delivered training on the subject to clients and the legal community, including the DIFC Academy of Law's course on the DIFC Data Protection Law (DIFC Law No. 5/2020 and its predecessor, DIFC Law No. 1/2007).

The team (including specialists from both the Middle East and London offices) also authored the Data Protection chapter in Laws of the DIFC, Volume 2 (and the subsequent update to that chapter), for which they were awarded the honorary title of 'Specialists in DIFC Data Protection Law' by the DIFC Academy and LexisNexis Middle East.

  • Advised a leading property developer on the data protection implications of its proposed consumer marketing activities across multiple Middle East jurisdictions and India, including tailoring its privacy policy to ensure compliance with local law requirements and allow for cross-border data transfers.
  • Advised several companies on compliance with the DIFC Data Protection Law (DIFC Law No. 5/2020), including advice on filing requirements, internal processes, content of privacy policies, the appointment of a data protection officer, and employment contract updates.
  • Advised a construction contractor company on its ability to gather data evidencing employee misconduct and monitor employee activity in the context of disciplinary proceedings, within the confines of the UAE Cyber Crimes Law (Federal Law No. 5/2012, as amended).
  • Advised multiple clients on the alleged unlawful disclosure/use of data, including highly confidential information and trade secrets, in the context of employee competition/team moves, and related sanctions under the UAE Penal Code (Federal Law No. 3/1987).
  • Advised multiple clients in relation to making/responding to multi-jurisdictional data subject access requests, including advising a former senior manager of a global investment bank on such matters under the laws of England & Wales and the DIFC, and advising a former senior executive of a multi-national hedge fund on such matters under the laws of England & Wales and Hong Kong.
  • Advised a leading multi-national communications agency on the potential UAE Penal Code implications regarding the use of photographic/video images of individuals as part of comparative advertising.
  • Advised a leading multi-national marine and engineering consultancy in relation to alleged breaches of the UAE Penal Code and UAE Cyber Crimes Law arising out of the disclosure of electronic communications in the context of alleged employee misconduct.