20 JAN 2026 · Working Paper

Gulf States AI Governance - Balancing Innovation and Risk

Gulf states (Qatar, UAE, Saudi Arabia, Bahrain, Oman) are racing to build AI leadership while balancing innovation with risk management, mirroring EU-style regulatory challenges. Qatar's Qatar Financial Centre and other Gulf regulators are developing AI-specific guidance.

Secondary evidenceRegional Governance ·Risk Management ·InnovationIssuing institution: Issuing authority not identified

01 JAN 2026 · Policy / Guidance

UAE Central Bank AI Guidance for Financial Institutions 2026

UAE Central Bank issued 2026 guidance creating consumer protection and responsible AI expectations for every licensed financial institution, complementing PDPL data protection activation.

Secondary evidenceFinancial Services ·Consumer ProtectionIssuing institution: Issuing authority not identified

18 DEC 2025 · Court Case

Arabyads Holding Limited v. Gulrez Alam Marghoob Alam

Lawyer appeared before the ADGM. Fabricated: Case Law | Defence cited a non-existent authority as “Allied Dunbar [1985]”; court found the citation did not exist and arose from inadequate verification of AI-derived research. Outcome: Mon.

Court: ADGMParty: Lawyer

Fine: 282508

Secondary evidenceJudicial & Law Enforcement ·Generative AI ·Liability & AccountabilityIssuing institution: ADGM

28 OCT 2025 · Court Case

Stelian Gheorghe v (1) BSA Ahmad Bin Hezeem & Associates LLP (2) Jimmy Haoula

Lawyer appeared before the DIFC Court of First Instance. Fabricated: Case Law | Witness statement filed (by Mr Robert Kravitz) contained non-existent authorities identified by the Defendants; Court noted these were serious errors. Outcome: Adverse costs order.

Court: DIFC Court of First InstanceParty: Lawyer

Secondary evidenceJudicial & Law Enforcement ·Generative AI ·Liability & AccountabilityIssuing institution: DIFC Court of First Instance

23 SEP 2024 · Other

United States and United Arab Emirates cooperation on Artificial Intelligence

On 23 September 2024, the United States (US) and the United Arab Emirates (UAE) issued a statement on their commitment to cooperate on artificial intelligence (AI), emphasising a shared vision of safe, secure, and trustworthy AI. Further, the statement outlines plans to develop a government-to-government memorandum of understanding to deepen collaboration on AI between the countries. The cooperation aims to focus on advancing safe AI practices, aligning regulatory frameworks, promoting ethica...

Official materialNational StrategyOfficial source · whitehouse.gov ↗

30 JUL 2024 · Law / Act

AI Office Charter for Development and Use of Artificial Intelligence

On 30 July 2024, the Office of Artificial Intelligence, Digital Economy, and Remote Work Applications of the United Arab Emirates adopted the Charter for the Development and Use of Artificial Intelligence. The Charter applies to all sectors involved in developing and adopting Artificial Intelligence (AI) solutions and applications. The Charter contains several principles focused on establishing robust frameworks for AI models, including strengthening human-machine ties to prioritise human wel...

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

01 JAN 2024 · Policy / Guidance

UAE Artificial Intelligence and Advanced Technology Council (AIATC)

New UAE regulatory body established to oversee AI and advanced technology governance.

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

15 NOV 2023 · Executive Order

ADGM Addendum to the European Commission's Standard Contractual Clauses (EU SCCs) for personal data transfers

On 15 November 2023, the Abu Dhabi Global Market Office of Data Protection (ADGM) adopted the Addendum to the European Commission's Standard Contractual Clauses (EU SCCs) for personal data transfers. The ADGM aims to support companies in data transfer processes involving personal information, in accordance with international data protection and privacy laws. This Addendum seeks to provide a mechanism for data transfers that are compliant with data protection rules within the ADGM, reduces dup...

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

10 SEP 2023 · Standard / Framework

Metaverse Self-Governance Framework White Paper

On 9 October 2023, the Artificial Intelligence, Digital Economy, and Remote Work Applications Office of the United Arab Emirates, in collaboration with the Dubai's Department of Economy and Tourism, released the Responsible Metaverse Self-Governance Framework White Paper. The White Paper introduces nine self-regulatory principles, such as interoperability, privacy by design, and sustainability, to guide the development of the metaverse. The White Paper puts forward interoperability as an impo...

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

10 SEP 2023 · Standard / Framework

Metaverse Self-Governance Framework White Paper including data protection regulation

On 9 October 2023, the Artificial Intelligence, Digital Economy, and Remote Work Applications Office of the United Arab Emirates, in collaboration with the Dubai's Department of Economy and Tourism, released the Responsible Metaverse Self-Governance Framework White Paper. The White Paper introduces nine self-regulatory principles, such as interoperability, privacy by design, and sustainability, to guide the development of the metaverse. According to the White Paper, Privacy by Design and Defa...

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

10 SEP 2023 · Standard / Framework

Metaverse Self-Governance Framework White Paper including user and age identification

On 9 October 2023, the Artificial Intelligence, Digital Economy, and Remote Work Applications Office of the United Arab Emirates, in collaboration with the Dubai's Department of Economy and Tourism, released the Responsible Metaverse Self-Governance Framework White Paper. The White Paper introduces nine self-regulatory principles, such as interoperability, privacy by design, and sustainability, to guide the development of the metaverse. As part of the principle of safety in design and benefic...

Secondary evidenceConsumer ProtectionIssuing institution: Issuing authority not identified

01 SEP 2023 · Other

Dubai International Financial Centre Data Protection Regulations, Regulation 10 ("Personal data processed through autonomous and semi-autonomous systems")

Establishes comprehensive obligations for entities deploying or operating AI systems that process personal data. Requires clear notices, transparency, accountability, and ethics in AI design. Mandates compliance with audit and certification requirements, ensuring systems process data for human-defined purposes.

Secondary evidenceIssuing institution: Issuing authority not identified

09 AUG 2023 · Executive Order

DIFC adequacy decision for CCPA

On 9 August 2023, the Dubai International Financial Centre (DIFC) issued its adequacy decision regarding the California Consumer Privacy Act of 2018 (CCPA) and the amendment to the CCPA introduced through the California Privacy Rights Act of 2020 hereby included. The DIFC regards the CCPA as providing an adequate level of protection of personal data, thus making the CCPA equivalent to the Data Protection Law (DIFC Law No. 5).

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

24 MAR 2023 · Law / Act

Law No. 9 of 2022 Regulating the Provision of Digital Services of Dubai

On 24 March 2023, Law No. 9 of 2020 Regulating the Provision of Digital Services is implemented. The Law applies to both digital services provided by the Dubai government and to digital services provided by non-government entities. The Law outlines the conditions for providing digital services and adopting digital identities for obtaining subscribed services and cybersecurity requirements. The Law also sets new requirements regarding data retention, data classification and data security.

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

14 JAN 2023 · Executive Order

Cabinet Resolution No. 111 Regulating Virtual Assets and their Service Providers

On 14 January 2023, Cabinet Resolution No. 111 on the regulation of virtual assets and their service providers (VASPs) entered into force in the UAE. The Resolution applies to virtual asset activities and VASPs, including those operating in free zones, while excluding financial free zones, digital securities, digital commodity contracts, and payment instruments regulated by the UAE Central Bank. It requires VASPs to obtain a licence from the Securities and Commodities Authority or a competent...

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

15 DEC 2022 · Other

UK-Dubai International Financial Centre data partnership

On 15 December 2022, the United Kingdom government and the Dubai International Financial Centre Authority (DIFC) released a joint statement on the UK-DIFC data partnership. The statement aims to deepen the partnership between the parties and enable the free and secure transfer of personal data. The parties will conduct an assessment of the data protection laws in order to adopt an adequacy decision to allow for cross-border data transfers.

Official materialNational StrategyOfficial source · gov.uk ↗

30 NOV 2022 · International Agreement

US-UAE Joint Statement on Digital Economy including cross-border data transfers

On 30 November 2022, the US Department of Commerce and the United Arab Emirates Ministry of Artificial Intelligence issued a joint statement on deepening collaboration in the digital economy, including through interoperable mechanisms that facilitate cross-border data transfers across economies with different regulatory regimes. The parties stated their intention to pursue innovative mechanisms to bridge their regulatory differences, to promote compatibility and explore interoperability. Furt...

Primary legal sourceNational StrategyOfficial source · trade.gov ↗

03 NOV 2022 · Law / Act

Establishment of Dubai Virtual Assets Regulatory Authority in Dubai Virtual Assets Law

On 11 March 2022, the Dubai Law No. 4 of 2022 on the Regulation of Virtual Assets in the Emirate of Dubai (Virtual Assets Law) was published in the Official Gazette of the Government of Dubai and came into force. The Virtual Assets Law governs activities involving virtual assets and related services throughout the Emirate of Dubai, with the exception of the Dubai International Financial Centre (DIFC), which has its own regulatory regime. The Virtual Assets Law establishes the Dubai Virtual A...

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

03 NOV 2022 · Law / Act

Authorisation requirements in Dubai Virtual Assets Law

On 11 March 2022, the Dubai Law No. 4 of 2022 on the Regulation of Virtual Assets in the Emirate of Dubai (Virtual Assets Law) was published in the Official Gazette of the Government of Dubai and came into force. The Virtual Assets Law governs activities involving virtual assets and related services throughout the Emirate of Dubai, with the exception of the Dubai International Financial Centre, which has its own regulatory regime. The law lays out authorisation requirements for virtual assets...

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

07 AUG 2022 · International Agreement

Dubai International Financial Centre Guidance on Data controller and processor agreements and obligations

On 8 July 2022, the Dubai International Financial Centre released guidance on data "Controller and processor agreements and obligations". Particularly, the guidance concerns the compliance of data controllers and processors with the Data Protection Law (No. 5 of 2020) and Data Protection Regulations (Articles 23 to 25). The guidance clarifies the contractual details between controllers and processors and what constitutes a solid written agreement in regards to data protection. Additionally, t...

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

08 JUL 2022 · Policy / Guidance

Dubai International Financial Centre Guidance on Retention and Storage of Personal Data

On 8 July 2022, the Dubai International Finance Center published its "Guidance on Retention and Storage of Personal Data". The outline aims to support individuals, organizations, and businesses in understanding the regulatory foundation of data governance, storage, and retention. The outline is based on Articles 9 and 14 of the Data Protection Law (5/2020) and emphasizes that data retention and storage are based on the data minimisation principle and must follow specific, case-by-case require...

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

02 JAN 2022 · Law / Act

Federal Decree by Law No. 45 Concerning Protection of Personal Data

On 2 January 2022, the Federal Decree by Law No. 45 of 2021 Concerning the Protection of Personal Data entered into force. The Decree by Law applies to controllers and processors in the UAE and to those outside the UAE that process personal data of UAE data subjects. Governmental entities, health data, banking and credit data, and companies in free zones with dedicated personal data legislation are excluded. The Decree by Law requires controllers to process personal data lawfully and for spec...

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

02 JAN 2022 · Law / Act

Federal Decree-Law No. 34 on Countering Rumors and Cybercrimes

On 2 January 2022, Federal Decree-Law No. 34 on Countering Rumors and Cybercrimes entered into force. The Decree-Law applies to all persons using information technology to commit offences in the UAE and to offences committed outside the UAE that affect its interests or security. The Decree-Law criminalises unauthorised access to information systems, hacking, data theft, cyberattacks, electronic fraud, identity impersonation, and the creation or dissemination of deepfakes and false information...

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

27 NOV 2021 · Law / Act

Data Office Law (Decree 44/2021)

Through Federal Decree-Law No. 44, the United Arab Emirates adopted the Data Office Law. The Law establishes the Data Office as the enforcer of the Personal Data Protection Law. Therefore, the Office has the power to issue penalties in case of violations of the Law. Moreover, the Office is mandated to propose data protection policies, define the territories where cross-border exchange of data can be pursued and adopt data protection standards and guidelines to support the implementation of th...

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

11 FEB 2021 · Executive Order

Oversight mechanism architecture in United Arab Emirates Networking and Cyber Security Operations Centre

On 2 November 2021 the Networking and Cyber Security Operations Centre is established by the Central Bank of the United Arab Emirates (CBUAE). The Centre will be responsible for increasing security measures in the financial sector of the United Arab Emirates (UAE). Specifically, the Center will strengthen the critical financial infrastructure in the UAE to protect the financial sector more efficiently against cyberattacks.

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

National Strategy

Artificial intelligence

Artificial intelligence AI set to grow into a USD 118.6bn industry by 2025 Rising number of connected devices and growing adoption of IoT are driving market growth Other Promising Foreign...

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

Law / Act

UAE Charter for the Development and Use of AI

The Charter for the Development and Use of Artificial Intelligence aims to achieve the strategic goals of the UAE Strategy for Artificial Intelligence, reflecting the leadership's vision of transforming the country into a global hub for developing and adopting AI solutions and applications ...

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

National Strategy

Artificial Intelligence Policy - DOF-Dubai Government

The Dubai Finance – Government of Dubai is committed to implementing an Artificial Intelligence Management System aligned with ISO/IEC 42001:2023 , ensuring the responsible, secure, and ethical use of AI technologies to support public financial management and enhance institutional performance.

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

National Strategy

UAE's International Stance on Artificial Intelligence Policy

The policy aligns with the UAE’s foreign strategy on emerging technologies, ensuring compliance with international standards. Through its active role in global AI governance, the UAE is committed to building a sustainable, inclusive, and technologically advanced society, where everyone can benefit from AI’s advancements. Establish principles that form the foundation for the development, deployment, and governance of artificial intelligence in the UAE.

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

National Strategy

UAE President issues resolution reconstituting Artificial Intelligence & Advanced Technology Council

UAE President issues resolution reconstituting Artificial Intelligence & Advanced Technology Council · Thursday, 23 October 2025 · A A · Share · View All · Thursday, 18 December 2025 · The UAE Government has issued a Federal Decree-Law establishing and organising the National Media Authority, as a federal public entity affiliated to the UAE Cabinet. Tuesday, 7 April 2026 ·

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

National Strategy

Cabinet approves UAE’s stance on AI Policy to reinfore its global leadership in technology

Developed jointly by the Office of the Assistant Foreign Minister for Advanced Science and Technology and the Office of the Minister of State for Artificial Intelligence, Digital Economy, and Remote Work Applications, the policy represents a strategic step within the UAE's comprehensive foreign policy framework, designed to tackle the complex challenges presented by AI on the global stage.

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

Policy / Guidance

UAE - Comprehensive AI Regulatory Framework Development

The UAE is actively developing a comprehensive AI regulatory framework with a focus on safety, data governance, and sector-specific guidance. The UAE Artificial Intelligence Office serves as the dedicated AI authority. The UAE and Saudi Arabia are regional leaders in MENA AI governance with advanced policy development.

Secondary evidenceNational AI Authority ·Comprehensive FrameworkIssuing institution: Issuing authority not identified

Working Paper

Middle East AI - Sovereign AI Infrastructure Push

The UAE and Saudi Arabia are building sovereign AI infrastructure and regulatory frameworks. Deloitte's 2026 trends report highlights Agentic AI, Physical AI, and Sovereign AI as key themes for the Middle East.

Secondary evidenceSovereign AI ·Infrastructure ·Regional LeadershipIssuing institution: Issuing authority not identified

National Strategy

Federal Decree‑Law No. (25) of 2018 on the Projects of Future Nature

AI law in United Arab Emirates: Federal Decree‑Law No. (25) of 2018 authorises the UAE Cabinet to grant provisional licences and temporary exemptions from federal legislation for innovative projects that use advanced or future-oriented technologies (including artificial intelligence) where no specific UAE legislation yet exists. It empowers the Cabinet to set conditions, controls and procedures for such pilot projects to allow regulated experimentation while bespoke regulation is prepared....

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

National Strategy

AI Adoption Guideline in Government Services (UAE AI Office)

AI law in United Arab Emirates: The AI Adoption Guideline in Government Services (2023) published by the UAE Artificial Intelligence Office provides non‑binding, practical guidance for federal and local government entities on safe, ethical, and effective AI adoption. It sets out governance structures, maturity assessment, risk management, documentation, and implementation steps to accelerate AI deployment while protecting privacy, rights and security....

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

National Strategy

Ethical AI Toolkit / AI Principles and Guidelines for the Emirate of Dubai (Smart Dubai)

AI law in United Arab Emirates: Smart Dubai’s Ethical AI Toolkit (AI Ethics Principles & Guidelines) is a non-binding framework published in January 2019 that sets city-level principles—fairness, accountability, transparency, explainability, safety, human-centred design and inclusivity—and includes a practical self-assessment tool to help Dubai government and private-sector projects evaluate ethical performance of AI systems. The Toolkit is voluntary but has been adopted across several Dubai government entities to guide procurement, design, testing and deployment of AI-enabled services....

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

National Strategy

UAE National Strategy for Artificial Intelligence (AI) 2031

AI law in United Arab Emirates: The UAE National Strategy for Artificial Intelligence (AI) 2031 is a federal strategic framework launched in October 2017 to position the UAE among global leaders in AI by 2031 through government-led adoption, talent development, data governance, and sectoral pilots across health, transport, energy, and government services. The strategy establishes institutional governance, a set of priority sectors, and an implementation roadmap to integrate AI across public services and to attract investment and talent. (ai.gov.ae)...

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

National Strategy

AI Ethics Principles and Guidelines (UAE national AI ethics guide)

AI law in United Arab Emirates: The UAE’s AI Ethics Principles and Guidelines (Dec 2022) is a non-binding national framework issued by the Minister of State for Artificial Intelligence (AI Office) to guide public and private sector design, procurement and deployment of AI systems. It sets out core ethical principles (e.g., fairness, transparency, accountability, privacy, robustness, human-centred design, sustainability) and accompanies a voluntary AI Ethics Self-Assessment Tool to help organisations assess and improve AI systems....

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified

National Strategy

Guidelines for Financial Institutions Adopting Enabling Technologies (joint UAE regulators)

AI law in United Arab Emirates: Issued jointly by the Central Bank of the UAE (CBUAE), Securities and Commodities Authority (SCA), Dubai Financial Services Authority (DFSA) and the Financial Services Regulatory Authority (FSRA) of ADGM, these non-binding Guidelines set out cross-sectoral principles and best practices for financial institutions adopting enabling technologies (APIs, Big Data/AI, Biometrics, Cloud, DLT). The Guidelines focus on governance, risk management, model validation, outsourcing controls, data protection and supervisory engagement to ensure safe, proportionate adoption while safeguarding customers and financial stability....

Secondary evidenceNational StrategyIssuing institution: Issuing authority not identified