Laws, Decrees and Resolutions
Federal Decree-Law No. (3) of 2003
Regulating Telecommunications
Federal Decree-Law No. 3 of 2003 regulates the telecommunications sector in the UAE. It establishes the General Authority for Regulating the Telecommunications Sector and the Digital Government, which oversees the sector, issues licenses, and ensures compliance with regulations. The law aims to provide high-quality telecommunications services, promote competition, and protect consumer rights. It also outlines the responsibilities of the High Committee Overseeing the Telecommunications Sector, including policy formulation and enforcement. The law includes provisions for network interconnection, equipment permits, frequency spectrum management, and penalties for violations. It emphasizes the modernization and development of telecommunications infrastructure to support the UAE’s digital transformation goals.
Law No. (26) of 2015
Regulating Data Dissemination and Exchange in the Emirate of Dubai
Law No. 26 of 2015 regulates the dissemination and exchange of data in the Emirate of Dubai. It aims to transform Dubai into a Smart City by managing data according to international best practices, enhancing transparency, and establishing governance rules. The law mandates Federal and Local Government Entities, as well as private entities, to classify, disseminate, and exchange data while ensuring data confidentiality and privacy. It also outlines the responsibilities of the Dubai Electronic Security Centre (DESC) and the Competent Entity in supervising the implementation of the law, maintaining data quality, and providing necessary infrastructure for data exchange. Penalties are prescribed for violations, and the law emphasizes the protection of customer data and intellectual property rights.
Law (2) of 2016
Establishing the Dubai Data Establishment
Law No. 2 of 2016 establishes the Dubai Data Establishment (DDE), a public entity affiliated with the Dubai Smart City Office (DSCO). The DDE is tasked with promoting Dubai’s position in data dissemination and exchange, creating a knowledge base for government and private sectors, and overseeing the implementation of data-related laws. The law outlines the DDE’s objectives, functions, and governance structure, including the roles of its Board of Directors and CEO. It mandates cooperation from all government entities in Dubai and provides the DDE with financial resources through fees, charges, and investments. The law aims to enhance data management and support Dubai’s vision of becoming a leading smart city.
Resolution No. (2) of 2017
Approving the Policies Document on Classification, Dissemination, Exchange, and Protection of Data in the Emirate of Dubai
The – Dubai Data Law – approved by Resolution No. 2 of 2017 outlines the rules, procedures, and regulations for the classification, dissemination, exchange, and protection of data in Dubai. It mandates government entities to conduct data inventories, prioritize high-value data, and classify data as open or shared. The document emphasizes the protection of personal and sensitive data, intellectual property rights, and compliance with information security standards. It also establishes the roles and responsibilities of the Dubai Data Establishment (DDE) and government entities, sets guidelines for data use and reuse, and provides mechanisms for resolving disputes and handling grievances. The policies aim to support Dubai’s smart transformation, enhance transparency, and improve the efficiency of government services.
Federal Law No. (2) of 2019
Concerning the Use of the Information and Communications Technology in Health Fields
Federal Law No. 2 of 2019 regulates the use of information and communication technology (ICT) in health fields in the UAE. It aims to ensure the optimal use of ICT in healthcare, maintain data security and confidentiality, and align practices with international standards. The law mandates the establishment of a central system for health data exchange, sets standards for electronic health systems, and requires health authorities to join this system. It outlines obligations for data protection, storage, and access, and prohibits unauthorized use of the central system. The law also includes provisions for penalties, disciplinary actions, and the training of healthcare personnel to ensure data security and compliance.
Federal Decree-Law No. (34) of 2021
on Countering Rumors and Cybercrimes
Federal Decree-Law No. 34 of 2021 on Countering Rumors and Cybercrimes in the UAE aims to enhance cybersecurity and combat the spread of false information. The law outlines various offenses, including hacking, unauthorized access to data, dissemination of false news, and cyber extortion. It imposes strict penalties for these crimes, including imprisonment and hefty fines. The law also addresses issues such as data privacy, protection of government and personal data, and the misuse of information technology. It empowers authorities to block websites and electronic accounts that violate its provisions and includes measures for the protection of national security and public order.
Federal Decree by Law No. (45) of 2021
Concerning the Protection of Personal Data
Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data establishes comprehensive regulations for the processing and protection of personal data in the UAE. It defines key terms, outlines the rights of data subjects, and sets obligations for data controllers and processors. The law mandates obtaining consent for data processing, implementing data security measures, and appointing data protection officers in certain cases. It also addresses cross-border data transfers, data breach notifications, and the role of the UAE Data Bureau in overseeing compliance. The law aims to ensure the privacy and confidentiality of personal data while promoting transparency and accountability in data handling practices.
Federal Decree by Law No. (46) of 2021
on Electronic Transactions and Trust Services
Federal Decree-Law No. 46 of 2021 on Electronic Transactions and Trust Services establishes a legal framework for electronic transactions and trust services in the UAE. It defines key terms, outlines the scope of application, and sets objectives to enhance trust in electronic transactions and protect customer rights. The law mandates licensing for trust service providers, specifies requirements for electronic signatures, seals, and certificates, and ensures their legal validity and enforceability. It also addresses the responsibilities of relying parties, signatories, and digital ID holders, and includes provisions for penalties and administrative violations. The law aims to facilitate digital transformation and encourage investment in electronic services while maintaining high standards of security and trust.
Other
The UAE Charter for the Development and Use of Artificial Intelligence
The UAE Charter for the Development and Use of Artificial Intelligence, issued on June 10, 2024, aims to position the UAE as a global leader in AI by promoting ethical and responsible AI use, protecting privacy and data security, and balancing technological advancement with social values. The charter outlines principles to enhance public trust, ensure safety, and address algorithmic bias, while fostering innovation and economic growth. It emphasizes transparency, accountability, and the importance of human-machine collaboration. The charter also supports the UAE’s strategic goals for AI, aiming to create an inclusive future with equitable technological access for all segments of society
UAE Strategy for Artificial Intelligence
The UAE Strategy for Artificial Intelligence aims to position the UAE as a global leader in AI by 2031. It focuses on integrating AI across various sectors, including healthcare, education, transportation, and infrastructure, to enhance efficiency and innovation. The strategy emphasizes developing AI talent, fostering research and development, and creating a supportive regulatory environment. It also aims to improve government performance, optimize resource use, and provide innovative solutions to challenges. The ultimate goal is to make the UAE a hub for AI and data-driven decision-making, contributing to economic growth and societal well-being.