Online safety & content laws in UAE (2026)
Online safety rules in UAE: partial.
The UAE regulates online content and safety through a layered but fragmented set of federal laws and administrative regimes rather than a single comprehensive online-safety act. The Telecommunications and Digital Government Regulatory Authority (TDRA) mandates ISP-level filtering of broadly defined prohibited content, including unlicensed VoIP, gambling, pornography, LGBTQ+ material, and content deemed contrary to public morality or national security, with criminal liability for circumvention via VPNs. A landmark Child Digital Safety Law (Federal Decree-Law No. 26 of 2025), effective 1 January 2026, introduces DSA-adjacent obligations on platforms and ISPs including risk-proportionate age verification, default privacy for children, and parental-consent requirements for under-13 data processing, with a one-year compliance window.
Legal framework
Multiple federal instruments: Federal Decree-Law No. 34/2021 (Combating Rumours and Cybercrimes), Federal Decree-Law No. 26/2025 (Child Digital Safety, in force January 2026), Federal Decree-Law No. 55/2023 (Media Regulation); TDRA mandatory ISP content filtering; UAE Media Council advertiser-permit regime
Key points: internet & online safety in UAE
TDRA Mandatory Content Filtering
The TDRA defines categories of prohibited content, including illegal VoIP, gambling, pornography, proxy/VPN services enabling prohibited-content access, and material offensive to Islam or national security, and requires all licensed ISPs (Etisalat/e&, du) to block such content at network level using DNS filtering, IP blocking, URL filtering, and deep-packet inspection.
Cybercrime & Rumours Law (No. 34/2021)
Federal Decree-Law No. 34 of 2021, in force from 2 January 2022, criminalises a wide range of online conduct including spreading false information damaging to national security or public order, hacking, identity theft, and using VPNs to access prohibited content; penalties reach AED 2 million in fines and custodial sentences.
Child Digital Safety Law (No. 26/2025)
Federal Decree-Law No. 26 of 2025, issued 1 October 2025 and in force 1 January 2026, imposes risk-proportionate age-verification obligations on digital platforms and ISPs, prohibits collection or processing of children's (under 13) data without verifiable parental consent, mandates default privacy settings and parental controls, and bans targeted advertising to children. It has extraterritorial reach covering foreign platforms targeting UAE users.
Media Regulation & Influencer Licensing
Federal Decree-Law No. 55 of 2023 and Cabinet Resolution No. 42 of 2025 require all content creators and advertisers, paid or unpaid, to hold a UAE Media Council Advertiser Permit (mandatory from 1 February 2026) and a commercial licence; 20 published content standards govern what media organisations and influencers may publish, with fines up to AED 1 million for violations.
VoIP Restrictions & Platform Liability
Consumer VoIP services (WhatsApp calls, FaceTime, Skype) remain blocked unless licensed by TDRA; approved licensed alternatives include Zoom, Microsoft Teams, Botim, and Cisco Webex. UAE law treats digital intermediaries as liable custodians responsible for proactive prevention of prohibited content, with no broad safe-harbour equivalent to EU e-Commerce Directive Article 14.
No Single Comprehensive Online-Safety Act
Unlike the EU Digital Services Act or UK Online Safety Act, the UAE has no single cross-cutting platform-accountability law covering algorithmic transparency, risk assessments, or systemic-harm duties for general-purpose platforms; regulation remains distributed across sector-specific instruments (cybercrime, child safety, media, telecoms) administered by different authorities (TDRA, UAE Media Council, courts).
Timeline of decisions
- Law · officialFederal Decree-Law No. 26 of 2025 on Child Digital Safety Issued
The UAE enacted its first dedicated child online-safety law requiring digital platforms and ISPs operating in or targeting UAE users to implement age verification, parental-consent mechanisms for under-13s, default privacy settings, and commercial-gaming blocks for minors. The law entered into force on 1 January 2026, with a full compliance deadline of January 2027.
UAE Legislation Portal
- Decision · officialCabinet Resolution 68 of 2024: Mandatory Licensing for Digital Content Creators
Implementing regulations for the 2023 Media Law came into force, requiring all influencers, social-media agencies, bloggers, and digital publishers in the UAE to hold an Emirates Media Council licence, with fines up to AED 1 million, doubled for repeat violations, and potential permanent closure for unlicensed operators.
UAE Government Portal
- Law · officialFederal Decree-Law No. 55 of 2023 on Regulating Media Enters into Force
A comprehensive media law extended regulation beyond traditional broadcasters to online content creators, influencers, streaming services, and digital advertising agencies, establishing the Emirates Media Council and a permanent violations committee with power to impose administrative penalties and suspend platforms.
UAE Legislation Portal
- Law · officialFederal Decree-Law No. 34 of 2021 on Countering Rumours and Cybercrimes Takes Effect
The replacement for the 2012 Cybercrime Law broadened offences to include geolocation tracking without consent, spreading false information harmful to national interests, and attacks on government systems, with penalties up to life imprisonment and extraterritorial reach over acts directed against UAE interests.
UAE Legislation Portal
- Law · officialFederal Decree-Law No. 5 of 2012 on Combating Cybercrimes Enacted
This decree replaced the 2006 law and significantly expanded the cybercrime framework to cover hacking, online fraud, defamation, threats to state security, insults to religion, and social-media misuse, with fines of AED 50,000-3 million and potential life imprisonment for the most serious offences.
TDRA
- Decision · officialTRA Issues VoIP Regulatory Policy v2.0, Mandates ISP-Level Blocking of Unlicensed VoIP
The Telecommunications Regulatory Authority formally classified unlicensed VoIP as prohibited content under the Internet Access Management framework, requiring Etisalat and du to block non-licensed internet-calling services via deep packet inspection, a regime that still restricts consumer VoIP calls on WhatsApp, FaceTime, and Skype.
TDRA
Sources
- uaelegislation.gov.ae/en/legislations/1526/download
- uaelegislation.gov.ae/en/legislations/3912/download
- uaelegislation.gov.ae/en/news/uae-government-issues-a-federal-decree-law-on-child-digital-s
- tdra.gov.ae/en/about/tdra-sectors/information-and-digital-government/policy-and-p
- tdra.gov.ae/-/media/About/regulations-and-ruling/EN/Internet-Access-Managment---R
- u.ae/en/information-and-services/justice-safety-and-the-law/cyber-safety-a
- u.ae/en/media/media-in-the-uae/media-regulation
- uaemc.gov.ae/en/%D8%AA%D8%B5%D8%B1%D9%8A%D8%AD-%D9%85%D8%B9%D9%84%D9%86/
- clydeco.com/en/insights/2026/01/uae-issues-landmark-child-digital-safety-law
- u.ae/en/information-and-services/justice-safety-and-the-law/cyber-safety-a
Next for UAE: CybersecurityComprehensive law
Next topicOrientation, not legal advice: verify against the primary sources linked above. Last verified 24 May 2026. Methodology & how to cite · State of Technology Regulation 2026