Regulatory Alerts2025-06-19
Technology and Information Rulebook
The Dubai Virtual Assets Regulatory Authority (VARA) issued this rulebook to mandate comprehensive technology governance, cybersecurity, and data protection standards for all licensed Virtual Asset Service Providers (VASPs). The framework requires VASPs to implement robust risk assessment processes, appoint a Chief Information Security Officer, and maintain strict controls over cryptographic keys, VA wallets, and third-party service providers. Additionally, the rulebook establishes binding requirements for annual testing, penetration audits, and confidential information handling to ensure operational resilience and regulatory compliance across the Dubai virtual asset market.
Share