This dossier contains 28 indexed evidence records connected to United Arab Emirates (federal). Use the filters to inspect status, instrument type, and topic coverage—including deepfakes, synthetic media, AI-generated content, detection, and KYC—without treating a summary as a legal conclusion.
28indexed records
1source files
12indexed topics
Evidence boundary
A registry record is not a legal opinion.
The cards below reproduce the registry's evidence boundary. A partial record stays partial, and an absent field is shown as not recorded. This informational research is not legal advice or a compliance certification. Detection results, labels, watermarks, provenance records, and biometric or KYC controls do not prove authenticity or compliance.
Source files in this dossier
research/uae-federal.md
Indexed evidence
Regulation records
Showing 28 of 28 records
Active law
Federal Decree-Law No. (34) of 2021 on Countering Rumors and Cybercrimes
Law Or Treaty
Citation
Federal Decree-Law No. (34) of 2021, Articles 6, 11, 13, 40, 43, 44, 55 and related provisions.
Covered actors
Natural persons
legal persons
account, website and service
operators
advertisers and persons publishing or republishing digital content;
competent security, investigative and prosecutorial authorities.
Neutral effect or obligation summary
The law does not use “deepfake” as a standalone offence, but its technology-neutral offences can cover conduct involving synthetic media. It prohibits unauthorized acquisition, possession, modification, disclosure, copying or dissemination of personal electronic data; creating a fake website, account or email falsely attributed to a person or legal entity collecting or processing personal data in violation of applicable legislation internet fraud using an alias or false impersonation insulting or defaming another person invading private or family life through unauthorized recording, transmission, disclosure or photography and modifying a record, photograph or scene with intent to defame or insult.
Effective or commencement
Jan 2, 2022
Verified date
Evidence boundary
Direct evidence section in the cited Markdown dossier; official URLs are reproduced from that section.
Synthetic MediaFraud And ImpersonationPrivacy And Data ProtectionCybersecurityProvenance And Labeling
Federal Decree-Law No. (45) of 2021 Concerning the Protection of Personal Data
Law Or Treaty
Citation
Federal Decree-Law No. (45) of 2021, especially Articles 1, 4–8, 10–18, 20–23 and 31.
Covered actors
Data subjects
controllers
processors
Data Protection Officers;
the UAE Data Office/Data Bureau and competent authorities.
Neutral effect or obligation summary
Lawful, fair, transparent, purpose-limited and secure processing data-subject rights including access, correction, erasure, portability/transfer in applicable cases, restriction or stopping of processing and objection appropriate technical and organizational security; processor controls breach and impact-assessment duties where applicable; and additional controls for sensitive and biometric data. AI training, voice-cloning, face synthesis, detection datasets and identity verification can involve personal or biometric data and must be assessed against the law and applicable sector rules.
Effective or commencement
Jan 2, 2022
Verified date
Evidence boundary
Direct evidence section in the cited Markdown dossier; official URLs are reproduced from that section.
Artificial IntelligenceIdentity And KycBiometricsPrivacy And Data Protection
Federal Decree-Law No. (44) of 2021 establishing the UAE Data Office
Law Or Treaty
Citation
Federal Decree-Law No. (44) of 2021, as referenced in the definitions and institutional provisions of the Personal Data Protection Law.
Covered actors
UAE Data Office
federal entities
controllers, processors and
other data-governance stakeholders.
Neutral effect or obligation summary
Provides the institutional basis for national data governance, standards, controls and coordination supporting personal-data compliance, including data used by AI and biometric systems.
Effective or commencement
Jan 2, 2022
Verified date
Evidence boundary
Direct evidence section in the cited Markdown dossier; official URLs are reproduced from that section.
Artificial IntelligenceBiometricsPrivacy And Data Protection
Federal Law by Decree No. (31) of 2021 promulgating the Crimes and Penalties Law
Law Or Treaty
Citation
Federal Law by Decree No. (31) of 2021, Crimes and Penalties Law.
Covered actors
Offenders, victims, public authorities, investigative bodies and
Public Prosecution.
Neutral effect or obligation summary
General criminal prohibitions may apply when synthetic identity evidence, forged documents, fraudulent representations or other AI-assisted conduct satisfies the relevant offence elements.
Effective or commencement
Jan 2, 2022
Verified date
Evidence boundary
Direct evidence section in the cited Markdown dossier; official URLs are reproduced from that section.
Synthetic MediaArtificial IntelligenceIdentity And KycFraud And ImpersonationCybersecurity
Federal Decree-Law No. (46) of 2021 on Electronic Transactions and Trust Services
Law Or Treaty
Citation
Federal Decree-Law No. (46) of 2021.
Covered actors
Signatories, relying parties, trust-service providers, government
and private entities, and the competent regulator.
Neutral effect or obligation summary
Establishes legal and evidentiary rules for reliable electronic transactions and trust services, including controls relevant to authentication, integrity, confidentiality and auditability. It supports identity assurance but does not validate the truth of AI-generated content.
Effective or commencement
Jan 2, 2022
Verified date
Evidence boundary
Direct evidence section in the cited Markdown dossier; official URLs are reproduced from that section.
Synthetic MediaArtificial IntelligenceIdentity And KycBiometrics
Federal Decree-Law No. (55) of 2023 Regulating Media
Law Or Treaty
Citation
Federal Decree-Law No. (55) of 2023.
Covered actors
Media establishments, publishers, broadcasters, digital-media
operators, advertisers, creators and the National Media/competent authorities.
Neutral effect or obligation summary
Requires compliance with media-content standards, including responsibility, respect for privacy and UAE public values. Fabricated, misleading, falsely attributed or privacy-invasive content can also engage the Cybercrime Law and other applicable laws. Digital and child-directed content must be assessed against child-safety and data-protection requirements.
Effective or commencement
Dec 1, 2023
Verified date
Evidence boundary
Direct evidence section in the cited Markdown dossier; official URLs are reproduced from that section.
Synthetic MediaArtificial IntelligencePrivacy And Data ProtectionCybersecurityPlatform Safety And ContentChild SafetyProvenance And Labeling
Federal Decree-Law No. (26) of 2025 Regarding Child Digital Safety
Law Or Treaty
Citation
Federal Decree-Law No. (26) of 2025, especially the Child Digital Safety Council, risk-based platform classification, enhanced child protection, reporting and administrative-penalty provisions.
Covered actors
Child Digital Safety Council
Ministry of Family
competent and
concerned federal/local authorities
digital platforms
internet service
providers
caregivers
security authorities and Public Prosecution.
Neutral effect or obligation summary
Platforms are classified by risk. Depending on classification, they must implement effective and reasonable age verification age-based controls content blocking, filtering and classification controls for targeted advertising and excessive interaction; child-privacy protections parental/time-limit and rest-period tools clear reporting channels and immediate reporting of child pornography material or harmful content. The law expressly permits/anticipates technical capability, including AI and machine-learning systems, for proactive detection, removal or reporting.
Effective or commencement
Jan 1, 2026
Verified date
Evidence boundary
Direct evidence section in the cited Markdown dossier; official URLs are reproduced from that section.
Artificial IntelligencePrivacy And Data ProtectionPlatform Safety And ContentChild Safety
Cabinet Resolution No. (106) of 2026 Regarding the Regulation of Children's Access to Social Media Platforms
Regulation Or Rule
Citation
Cabinet Resolution No. (106) of 2026.
Covered actors
Social-media platforms
children
caregivers
Child Digital Safety
Council and competent authorities.
Neutral effect or obligation summary
Children under 15 may not create, use or operate personal accounts and may not access full interactive features. Users aged 15 to under 16 are subject to enhanced protections. Platforms must apply reliable age-verification and enforcement measures, prevent circumvention and protect privacy. Official communications describe digital identity, official-document, biometric or AI-supported methods as possible approved approaches simple self-declaration is not sufficient. Data minimization, purpose limitation, security and limited retention apply to verification.
Effective or commencement
Jun 30, 2026
Verified date
Evidence boundary
Direct evidence section in the cited Markdown dossier; official URLs are reproduced from that section.
Artificial IntelligenceIdentity And KycBiometricsPrivacy And Data ProtectionPlatform Safety And ContentChild Safety
Federal Decree-Law No. (30) of 2024 Regarding the “Know Your Client” Digital Platform
Law Or Treaty
Citation
Federal Decree-Law No. (30) of 2024.
Covered actors
KYC platform company
Central Bank
Ministry of Finance
financial
institutions and other authorized users
customers/data subjects
competent
authorities.
Neutral effect or obligation summary
Establishes a platform and controls for KYC data, including identity information, consent/authorization, cybersecurity, secure data exchange and compliance with applicable data-protection requirements. Reliable KYC data and reports are relevant to synthetic identity and impersonation risk, but the law does not itself prescribe a deepfake detector.
DatesNot recorded in registry
Verified date
Evidence boundary
Direct evidence section in the cited Markdown dossier; official URLs are reproduced from that section.
Synthetic MediaIdentity And KycFraud And ImpersonationCybersecurityPlatform Safety And ContentFinancial Services
Cabinet Resolution No. (55) of 2026 and Cabinet Resolution No. (56) of 2026 for the KYC Digital Platform
Type not recorded
Citation
Cabinet Resolution No. (55) of 2026 (executive regulations); Cabinet Resolution No. (56) of 2026 (administrative violations and sanctions).
Covered actors
KYC platform company, Central Bank, users of KYC reports,
customers, regulated financial institutions and competent authorities.
Neutral effect or obligation summary
Operationalizes collection, retention, analysis, exchange, report issuance, authorization, identity verification and Central Bank controls provides an administrative-penalty schedule for violations.
Effective or commencement
Apr 30, 2026
Verified date
Evidence boundary
Direct evidence section in the cited Markdown dossier; official URLs are reproduced from that section.
Identity And KycPlatform Safety And ContentFinancial ServicesProvenance And Labeling
Federal Decree-Law No. (10) of 2025 on AML, CFT and Proliferation Financing
Law Or Treaty
Citation
Federal Decree-Law No. (10) of 2025, especially the offences, supervisory, customer-due-diligence, beneficial-owner, reporting and record-keeping provisions.
Covered actorsNot recorded in registry
Neutral effect or obligation summaryNot recorded in registry
Effective or commencement
Oct 14, 2025
Verified date
Evidence boundary
Direct evidence section in the cited Markdown dossier; official URLs are reproduced from that section.
Synthetic MediaIdentity And KycBiometricsFraud And ImpersonationFinancial Services
No general federal AI-content labeling, provenance or detector-certification obligation was identified in the reviewed sources.
DatesNot recorded in registry
Verified date
Evidence boundary
Direct evidence section in the cited Markdown dossier; official URLs are reproduced from that section.
Synthetic MediaArtificial IntelligenceIdentity And KycPrivacy And Data ProtectionCybersecurityPlatform Safety And ContentChild SafetyProvenance And Labeling
TDRA Internet Guidelines and Internet Access Management Regulatory Policy
Guidance
Citation
TDRA Internet Guidelines; Internet Access Management Regulatory Policy.
Covered actors
TDRA, licensed providers, internet service providers, websites
and services targeting UAE users.
Neutral effect or obligation summary
ISPs must block access to prohibited content categories under the policy, including content contrary to public order, public morality, national security or applicable UAE law. Categories include privacy-invasive material, unauthorized disclosure, harmful child content and content connected with cybercrime. Services targeting UAE users are advised to comply with the categories to avoid access denial.
DatesNot recorded in registry
Verified date
Evidence boundary
Direct evidence section in the cited Markdown dossier; official URLs are reproduced from that section.
Artificial IntelligencePrivacy And Data ProtectionCybersecurityChild SafetyProvenance And Labeling
SCA AML/CFT guidance, joint supervisory AML/CFT guidance, SCA guidance for virtual assets and virtual-asset service providers, and Federal Decree-Law No. (32) of 2025 concerning the Capital Market Authority.
Covered actorsNot recorded in registry
Neutral effect or obligation summary
Risk-based onboarding reliable identity and beneficial-owner verification no anonymous, fictitious or pseudonymous accounts EDD for higher-risk customers ongoing monitoring updated red-flag indicators records and STR/SAR reporting to the UAE FIU. The guidance is relevant to synthetic identity and manipulated-document risk, but does not impose a universal deepfake detector or biometric technology.
DatesNot recorded in registry
Verified date
Evidence boundary
Direct evidence section in the cited Markdown dossier; official URLs are reproduced from that section.
Synthetic MediaIdentity And KycBiometricsFinancial Services
Ministry of Economy AML/DNFBP guidance and enforcement channel
Enforcement Record
Citation
Ministry of Economy AML materials, including beneficial-owner procedure/circulars, sector guidance and goAML registration/reporting instructions; current official Ministry branding may also appear as Ministry of Economy and Tourism.
Covered actorsNot recorded in registry
Neutral effect or obligation summary
Maintain accurate beneficial-owner information; appoint an appropriately competent compliance officer where required use reliable identity evidence retain records register for and use the FIU's goAML channel for STR/SAR and other applicable reports. The Ministry's real-estate guidance specifically warns about proxies, intermediaries and concealed beneficial ownership.
DatesNot recorded in registry
Verified date
Evidence boundary
Direct evidence section in the cited Markdown dossier; official URLs are reproduced from that section.
CBUAE Guidance Note on Responsible AI/ML by Licensed Financial Institutions
Guidance
Citation
CBUAE, Guidance Note on the Consumer Protection and Responsible Adoption and Use of Artificial Intelligence and Machine Learning by Licensed Financial Institutions in the UAE.
Covered actors
Banks and other licensed financial institutions, boards, senior
management, model owners, risk/compliance/internal audit teams, vendors and
consumers.
Neutral effect or obligation summary
Documented AI governance proportionate to risk; board and senior-management accountability model inventory third-party due diligence transparency, explainability, fairness, non-discrimination, human oversight, data management and privacy monitoring and risk management. Financial institutions should not rely on uncontrolled models.
Effective or commencement
Feb 11, 2026
Verified date
Evidence boundary
Direct evidence section in the cited Markdown dossier; official URLs are reproduced from that section.
Synthetic MediaArtificial IntelligencePrivacy And Data ProtectionFinancial Services
CBUAE digital identification and emerging ML-risk guidance
Guidance
Citation
CBUAE Guidance for Licensed Financial Institutions on Digital Identification for Customer Due Diligence; CBUAE joint paper on emerging machine-learning/terrorist-financing/proliferation-financing risks and trends.
facilities, payment-token service providers, virtual-asset actors, ID
service providers and CBUAE supervisors.
Neutral effect or obligation summary
Use reliable and independent identity sources; assess assurance levels apply appropriate identity proofing and authentication use Emirates ID validation where applicable consider liveness detection, document/data consistency checks, behavioral biometrics, human escalation and ongoing monitoring. The joint paper identifies synthetic identities, audio/video deepfakes and voice deepfakes as risks that can defeat ordinary verification.
DatesNot recorded in registry
Verified date
Evidence boundary
Direct evidence section in the cited Markdown dossier; official URLs are reproduced from that section.
Synthetic MediaArtificial IntelligenceIdentity And KycBiometricsPrivacy And Data ProtectionFinancial Services
Ministry of Education professional and child digital-safety guidance
Guidance
Citation
Ministry of Education Code of Conduct for Education Professionals in General Education; official digital-safety initiatives.
Covered actors
Ministry, education entities, educators, students, families and
school technology administrators.
Neutral effect or obligation summaryNot recorded in registry
DatesNot recorded in registry
Verified date
Evidence boundary
Direct evidence section in the cited Markdown dossier; official URLs are reproduced from that section.
Synthetic MediaArtificial IntelligenceIdentity And KycBiometricsFraud And ImpersonationPrivacy And Data ProtectionCybersecurityPlatform Safety And ContentChild SafetyFinancial ServicesProvenance And Labeling
