Home / People / Ben Gibson
Portrait of Ben Gibson

Ben Gibson


Level 15 Burj Daman
Dubai International Financial Centre
PO Box 506873
United Arab Emirates
Languages English

Ben is a Technology lawyer recognised in the Legal 500 in the UAE. He specialises in complex commercial technology projects, including procurement, development and outsourcing, as well as IT licensing and data protection.  His clients in the Middle East have included Google, Cisco, the Dubai International Financial Centre (DIFC) Authority, stc (Saudi Telecoms Company) and the King Abdullah Financial District.

Ben helped the DIFC to draft its Data Protection Law (Law No 5 of 2020).

Before moving to the UAE, Ben practised in England where his clients included government departments and bodies along with businesses in sectors including financial services, energy and retail. He was also recognised in the Legal 500 UK.

more less

Relevant experience

  • The DIFC Authority on the drafting of the DIFC Data Protection Law.
  • A UAE-based investment company on the commercial and operational aspects of a joint venture to develop a commercial-scale data centre in the UAE.
  • A major UAE conglomerate on the commercial agreement with a European supplier of high-tech logistics solutions.
  • A major global internet company on the development of telecommunications infrastructure in Qatar.
  • A UAE currency exchange and money transfer provider on the contracts to procure the development, support and maintenance of a new transaction processing and customer management system.
  • A Saudi healthcare-sector IT services company in relation to protection of intellectual property and the development of an artificial intelligence engine in conjunction with a Chinese service provider, to be used in the provision of public healthcare in Saudi Arabia and on software licensing terms as part of a strategic government healthcare sector digitisation project.
  • King Abdullah Financial District on telecommunications infrastructure arrangements for tenants.
  • The United Kingdom Ministry of Justice on a major long-term outsourcing agreement.
  • NHS Digital, the digital procurement and data management arm of the UK National Health Service, on various technology procurements and on data protection compliance issues.
  • The Cornerstone telecommunications joint venture between Vodafone and Telefonica in the UK.
  • Numerous financial services and retail businesses on software licensing agreements with vendors such as Oracle, SAP, HP and IBM.
  • Various clients on regulatory issues in the technology and telecommunications space in the Middle East, including in relation to the Saudi Cloud Computing Regulatory Framework and the CITC’s Internet of Things Regulatory Policy.
  • Various technology start-ups in the UAE on issues relating to compliance, brand protection and contracting.
  • Bidders and acquirers of off-shore electricity transmission cables under the UK’s “OFTO” regulatory framework.
more less


  • 2007 – LLB – Nottingham Law School, Nottingham.
  • 2004 – Philosophy, Cardiff University, Cardiff.
more less


New Frame­work for Vir­tu­al As­sets in Dubai
On the 28 Feb­ru­ary 2022, the Emir­ate of Dubai is­sued Dubai Law No. 4 on Reg­u­lat­ing Vir­tu­al As­sets in the Emir­ate of Dubai (“Dubai Vir­tu­al As­sets Reg­u­la­tion” or “DVAR”) in an ex­cit­ing de­vel­op­ment...
UAE: Amended IP Laws take ef­fect
The laws on copy­right and trade­marks in the United Ar­ab Emir­ates (“UAE”) have been re­pealed and re­placed as of 2 Janu­ary 2022. The new laws, in­tro­duced last year as part of the "Year of the 50th"...
UAE leg­al re­forms – new UAE data pro­tec­tion law
In­tro­duc­tion - 2021 Re­forms In Q4 2021, as part of its 50th Year An­niversary, the UAE an­nounced some of the broad­est changes to its leg­al land­scape in many years. It also in­tro­duced ma­jor prac­tic­al changes...
KSA’s New Per­son­al Data Pro­tec­tion Law – GDPR sim­il­ar­it­ies and dif­fer­ences
Fol­low­ing the glob­al trend of co­di­fy­ing data pro­tec­tion rules, the King­dom of Saudi Ar­a­bia (“KSA”) has pub­lished the Per­son­al Data Pro­tec­tion Law (“PDPL”) which is KSA’s first na­tion­al gen­er­al...
Saudi Per­son­al Data Pro­tec­tion Law
Saudi Ar­a­bia has pub­lished its first na­tion­al data pro­tec­tion law. The law re­quires fur­ther im­ple­ment­ing reg­u­la­tions (due with­in 180 days) to provide full de­tails but still, at this stage, cre­ates a ro­bust frame­work for data pro­tec­tion that will re­quire Saudi busi­nesses (and over­seas busi­nesses) to care­fully con­sider their com­pli­ance. Pen­al­ties for vi­ol­a­tion can be severe and in­clude crim­in­al pro­sec­u­tion.
Data pro­tec­tion and se­cur­ity
Ex­pert leg­al ad­visers
Im­pact of the GDPR in the United Ar­ab Emir­ates
1. Ap­plic­able le­gis­la­tion gov­ern­ing data pro­tec­tion in UAE Na­tion­al le­gis­la­tionThe UAE Pen­al Code (Fed­er­al Law No. 3 of 1987)The Law on Com­batting Cy­ber­crimes (Fed­er­al Law No. 5 of 2012)The Law on the...
CMS Net­work Shar­ing 4.5
On the brink of a new gen­er­a­tion
Elec­tron­ic sig­na­ture law in com­mer­cial con­tracts in United Ar­ab Emir­ates
1. Defin­i­tion and form­al re­quire­ments of writ­ten leg­al state­ments or leg­al state­ments leg­ally bind­ing if the law re­quires writ­ten form The UAE has a multi-layered leg­al sys­tem, with le­gis­la­tion is­sued...
Data pro­tec­tion and cy­ber­se­cur­ity laws in the United Ar­ab Emir­ates
Data pro­tec­tion 1. Loc­al data pro­tec­tion laws and scope The UAE has a multi-layered leg­al sys­tem, with le­gis­la­tion is­sued at Fed­er­al and Emir­ate level. In ad­di­tion, the UAE con­tains nu­mer­ous spe­cial...