Tracking a Husband or Wife Without Consent in the UAE: GPS, AirTags, Shared Devices, and Electronic Surveillance

Short answer: Marriage does not create an automatic right to track a spouse’s movements. Secretly placing a GPS device in a car, hiding an AirTag or similar tracker in a bag, activating location sharing through an account, installing spyware or monitoring a phone can create serious privacy and cybercrime risk when done without valid consent or lawful authority. Transparent family-safety tools, genuinely shared accounts and emergency assistance may be different, but the permission must match the device, data, purpose and period of tracking.

Federal Decree-Law No. 34 of 2021 on Countering Rumours and Cybercrimes expressly addresses tracking, monitoring, revealing, transmitting, disclosing, copying or keeping geographic-location data of third parties as part of its privacy provisions. It also protects private and family life against unauthorised interception and electronic surveillance. The fact that the person being tracked is a husband or wife does not, by itself, turn hidden surveillance into consent.

This article explains the UAE legal and practical issues around GPS trackers, AirTags, smart watches, shared devices, vehicle systems, cloud accounts and spyware. It distinguishes safety arrangements from covert monitoring, discusses evidence and complaints, and gives steps for both the person being tracked and the person who installed or enabled the tracker. It is general information, not advice on a specific case.

Contents

1. 1. The core rule: marriage is not blanket tracking consent
2. 2. UAE laws that may apply
3. 3. GPS, AirTags, shared devices and account tracking
4. 4. What valid consent should cover
5. 5. Family safety, children and shared vehicles
6. 6. Tracking evidence in divorce or criminal proceedings
7. 7. Sharing location data, threats and coercive control
8. 8. What a tracked spouse should do
9. 9. What the person who installed the tracker should do
10. 10. Work, medical, financial and third-party data
11. 11. A lawful digital-safety checklist
12. 12. Frequently asked questions

1. The core rule: marriage is not blanket tracking consent

A spouse may know where the family car is usually parked, share a calendar or agree to use a location feature during a trip. Those facts do not necessarily authorise continuous monitoring of every movement. The analysis depends on the person tracked, the device, the source of the location data, the notice given, the purpose, the duration and what happens to the data afterwards.

Four questions should be asked before relying on a tracking arrangement:

1. Who owns or controls the device or account? Ownership of a car or family subscription does not automatically authorise surveillance of the person using it.
2. Was the tracking visible and understood? A visible family-safety setting is different from a tracker hidden in a bag or a password-reset used to activate location history.
3. What was the agreed purpose? School pick-up, an emergency journey or shared logistics is different from investigating private relationships or controlling movements.
4. Was consent still current? Separation, a dispute, a changed password or an express withdrawal may end a previous permission.

Tracking can be a pattern rather than a single act. A tracker that reports one location may become more intrusive when it stores months of movement history, sends alerts to a third party, identifies visits to a clinic or workplace, or is combined with recordings, account access and threats. Legal risk often increases with secrecy, persistence, disclosure and coercion.

2. UAE laws that may apply

Cybercrime and privacy

Article 44 of Federal Decree-Law No. 34 of 2021 concerns revealing secrets and invasion of privacy. It covers using an information network, information system or information-technology equipment with the intention of invading another person’s privacy or the sanctity of private or family life without consent, except in cases authorised by law. The listed acts include eavesdropping, interception, recording, transmitting, broadcasting or revealing communications and audio-visual material, as well as tracking, monitoring, revealing, transmitting, disclosing, copying or keeping geographic-location data of third parties.

The English text provides a minimum six-month imprisonment term and/or a fine between AED 150,000 and AED 500,000 for the listed privacy-invasion conduct. The same law also addresses hacking, personal electronic data, passwords, illegal interception, cyberextortion and disclosure. The correct legal classification depends on the technology, intent, authorisation, data obtained, harm and subsequent use.

Personal data

Federal Decree-Law No. 45 of 2021 on Personal Data Protection contains principles about privacy, security, consent, authorised access and processing. It excludes certain categories, including a data subject processing their own data for personal purposes, and may not directly govern every private spousal interaction. That does not remove the separate Cybercrime Law risk where a person uses technology to track, intercept, copy or disclose another person’s location or private information.

Lawful official monitoring and investigation

The Federal Decree-Law No. 38 of 2022 on Criminal Procedures provides controlled powers for authorities. The Public Prosecution may search devices, networks, electronic media and information systems when an investigation requires it. Subject to prior approval of the Attorney General, the Prosecutor may monitor and record conversations. These statutory powers show why private parties should use police, Public Prosecution or court routes when evidence or urgent protection is needed, rather than installing covert surveillance themselves.

3. GPS, AirTags, shared devices and account tracking

GPS devices in a car

Installing a tracker in a vehicle may seem different from tracking a phone, but the result may still be a detailed record of a person’s movements. The person who owns the vehicle, pays the lease or has a family mandate should not assume that they can secretly monitor a spouse who drives it. The tracker may reveal visits to a lawyer, doctor, shelter, place of worship, employer or family member and may also record the movements of passengers.

A transparent fleet or family safety system can be structured with notice, defined users, limited retention and a clear purpose. A hidden device activated during a marital dispute is much harder to describe as ordinary household management. Keep the distinction between vehicle security—such as recovering a stolen car—and personal surveillance.

AirTags and similar Bluetooth trackers

An AirTag or similar device may be small, inexpensive and easy to hide. Its size does not reduce the privacy analysis. A tracker that follows a bag, key ring, child’s equipment or vehicle can generate location information about the person carrying or using it. Device alerts may warn a person that an unknown tracker is travelling with them, but the absence of an alert does not make the placement lawful.

Do not open a tracker account, change its ownership, disable safety alerts or use another person’s device merely to improve secret monitoring. If a tracker is discovered, photograph its location, preserve its serial or identifier and consider a safe technical inspection before removing or destroying it.

Shared phones, tablets and family accounts

Family sharing can create overlapping permissions. A spouse may be an administrator on a cloud plan, have access to a shared tablet or manage a child’s account. Those roles may authorise family billing or device recovery; they do not necessarily authorise a complete history of an adult spouse’s movements. Check the account settings, delegated permissions, recovery numbers, location-sharing list and connected applications.

Spyware and remote access

Installing spyware, using a remote-management profile, forwarding messages to another account, or taking over a recovery email can involve unauthorised access, password acquisition, interception or personal-data offences. It may also expose the installer to claims by third parties whose messages or location data were captured. Do not use commercial “spouse monitoring” software as if the product’s marketing language were a legal authorisation.

How tracking is discovered

Discovery may come from an unknown-tracker alert, unexpected battery drain, a new application, an unfamiliar device in a cloud account, a changed recovery number, a vehicle diagnostic report or a spouse knowing details that should not have been visible. None of these signs proves who installed the system. Preserve the alert and technical facts before resetting the device, because a reset may remove useful information about the account, device identifier or time of access.

Technical inspection should be proportionate and safe. A qualified examiner can identify a tracker, review account permissions and create a forensic image without changing the original evidence. A private technician should not hack into the suspected spouse’s accounts or access unrelated data. If a device may contain evidence of a crime, ask the police or Public Prosecution about preservation and seizure rather than taking unauthorised copies.

4. What valid consent should cover

Consent should be specific enough that both people understand what is being shared. A useful written or clearly recorded arrangement identifies:

• the device, application, vehicle or account;
• who can view the data and whether access is mutual;
• the purpose, such as travel safety, child collection or emergency response;
• when tracking starts and ends;
• how long location history is retained;
• whether data can be exported or shared with another person; and
• how either spouse can withdraw consent and disconnect the feature.

Consent should be voluntary. A spouse who agrees because of a threat, financial pressure, fear of violence or an ultimatum may later challenge whether the arrangement was genuine. A one-time permission to find a phone during an emergency is not necessarily consent to continuous tracking for months.

Separation is a practical reset point. When spouses live apart, change vehicles, end a family subscription or begin court proceedings, each person should review shared devices, location lists, family administrators and recovery credentials. Send a clear notice if permission is withdrawn, then remove access through the platform or vehicle provider. Continuing to receive location data after that notice can make the lack of authorisation easier to prove.

5. Family safety, children and shared vehicles

Not every location feature is abusive or unlawful. Couples may agree to share location when driving long distances, during a medical emergency, or when collecting children. Parents may use transparent safety tools for a minor’s device. A business may track an employer-owned vehicle under a written policy. These examples still require proportionality, notice, security and a defined purpose.

Children’s safety does not give one parent unlimited surveillance of the other parent. A parent may need to know where a child is during handover, but tracking the other parent’s entire route or communicating the data to relatives may exceed that purpose. Family-court orders, parenting plans and police directions should be followed exactly. When a child may be at immediate risk, use official child-protection and police channels rather than hidden devices.

For shared vehicles, document whether the tracker protects the car, assists with logistics or monitors a person. Use the minimum data needed, restrict administrator access, set a retention period and remove access when a spouse moves out, a relationship ends or the vehicle changes hands. A written policy is not a defence to an otherwise unlawful purpose, but it reduces misunderstanding and creates accountability.

6. Tracking evidence in divorce or criminal proceedings

Location history can be relevant to a divorce, custody, domestic-violence or criminal case. It might show a person’s route, the presence of a vehicle at a place, a breach of an order or a pattern of unwanted surveillance. Relevance is not the same as admissibility, authenticity or lawful collection.

If a spouse discovers a tracker, preserve the device, identifier, alerts, account screenshots, dates and locations without editing the original material. Do not destroy the tracker or retaliate by placing one on the other person. Ask counsel whether the material should be reported to police, submitted to the Public Prosecution, examined by a digital expert or used in a family-court application.

The court may ask who installed the device, which account received the data, how the app was configured, whether the tracker was altered, how long it operated, whether a third party was monitored and whether the data is complete. A screenshot of a map is weaker than an authenticated account record with the native history and a clear chain of custody. Even genuine location data may be challenged as irrelevant, incomplete or unlawfully obtained.

Official investigators have powers to collect and preserve technical evidence. Private parties should not bypass a password, impersonate an account holder, hack a platform or request a technician to covertly access another person’s device. Outsourcing the surveillance does not remove personal responsibility.

7. Sharing location data, threats and coercive control

Tracking becomes more serious when combined with disclosure or control. Sending a spouse’s live location to relatives, an employer, a school or social media can expose private or family life and create additional harm. A message such as “I know where you are; do what I say or I will tell everyone” may raise threats, cyberextortion, harassment or domestic-abuse concerns depending on the facts.

Do not publish location screenshots, map histories, tracker identifiers or photographs of a spouse’s private visits. If a lawyer needs the information, transmit it securely and provide only what is necessary. Do not use location data to pressure a spouse to sign a settlement, waive custody, transfer property or withdraw a complaint.

8. What a tracked spouse should do

1. Prioritise safety. If tracking is part of threats, stalking, violence or coercive control, go to a safe place and contact police or an emergency service. Do not confront the person if doing so creates immediate danger.
2. Preserve the tracker and alerts. Photograph where the device was found, note the date and time, save warning notifications and record the serial or device identifier. Avoid destroying or throwing away the device.
3. Secure accounts from a trusted device. Change passwords, enable multi-factor authentication, review logged-in sessions, remove unknown recovery methods and check location-sharing permissions.
4. Check vehicles and belongings safely. Use a reputable technical professional or police assistance if a hidden device is suspected. Do not conduct a dangerous search or return to an unsafe location.
5. Preserve the chronology. Note unusual knowledge of movements, messages, threats, sightings, device alerts and the people who may have received data.
6. Obtain legal advice. A lawyer can assess a Cybercrime Law complaint, family-court application, protection request, evidence-preservation route or response to an allegation.

9. What the person who installed the tracker should do

If you installed or activated a tracker without clear permission, stop monitoring and stop sharing the data. Do not delete logs, destroy the device, threaten the spouse or ask a third party to conceal the installation. Deleting evidence can worsen the situation and may interfere with an investigation.

Seek confidential legal advice and explain exactly what was installed, where, when, how it communicated, what data was collected, who could see it and whether anything was disclosed. A lawyer can assess whether the conduct falls within privacy, hacking, data or threat provisions and can advise on a lawful response. If the purpose was vehicle recovery or immediate safety, preserve the documents that show that limited purpose and the steps taken to end access.

10. Work, medical, financial and third-party data

Location data often reveals more than a route. It can identify visits to a medical clinic, lawyer, employer, school, shelter, bank or place of worship. If the tracker captures other passengers, employees, clients, patients or children, their privacy and confidentiality may also be affected.

A spouse who is a company director or account signatory should use corporate and banking procedures to review business records. A personal tracking device is not a substitute for a shareholder inspection right, a bank mandate or a court order. Tracking an employee’s vehicle, work phone or company asset may be lawful only under a transparent workplace policy and applicable sector rules; personal marital status does not decide the employment-law analysis.

Medical, financial and e-payment information should be treated as highly sensitive. Do not send location history to a group chat to prove an allegation. Limit access, protect the original file and ask counsel whether a regulator, bank, employer or health authority must be notified.

11. A lawful digital-safety checklist

For couples using shared safety tools

• Agree in writing which app, device, vehicle or account is shared.
• State the purpose, time period, viewers, retention period and withdrawal process.
• Use visible settings and mutual access instead of hidden trackers.
• Review permissions after separation, a change of residence or a family-court order.
• Remove former users, connected applications and recovery accounts promptly.

For a person who suspects surveillance

• Preserve alerts and device identifiers before changing or resetting the device.
• Secure accounts through a trusted device and review location-sharing history.
• Do not retaliate, hack back, place a tracker or publish accusations.
• Use police, Public Prosecution or court processes for lawful preservation and collection.
• Obtain advice before removing a device if doing so could create a safety or evidence risk.

12. Frequently asked questions

Is it illegal to track my spouse with an AirTag in the UAE?

Secretly tracking a spouse without valid consent can create serious risk under the Cybercrime Law’s privacy provisions, which refer to tracking, monitoring and disclosure of geographic-location data. The result depends on the device, consent, purpose, duration, data collected and use.

What if I bought the car or phone?

Ownership of the hardware is not automatically consent to monitor the person using it. A vehicle-security or device-recovery purpose should be transparent and limited; personal surveillance may require a different legal analysis.

Can I track a spouse to prove adultery?

Do not assume that suspicion, adultery allegations or divorce proceedings authorise hidden tracking. Ask a lawyer about lawful evidence, disclosure, expert examination or a court and Public Prosecution route.

Can location history be used in a divorce case?

It may be relevant, but relevance does not guarantee admissibility or weight. The court may examine authenticity, completeness, legality, context and the method by which the data was obtained.

What if tracking was for the child’s safety?

Transparent, proportionate child-safety arrangements may be different from secretly tracking another parent. Follow any parenting plan or court order and use official channels where there is a genuine safety concern.

Can Hossam Zakaria Legal Consultancy help with a tracking complaint?

The office can assess the technology and facts, advise on privacy and cybercrime exposure, preserve evidence, prepare a complaint or response, and coordinate family, criminal or digital-forensic support where appropriate.

Official sources and disclaimer

This article is based on the official UAE texts of Federal Decree-Law No. 34 of 2021 on Countering Rumours and Cybercrimes, Federal Decree-Law No. 45 of 2021 on Personal Data Protection and Federal Decree-Law No. 38 of 2022 on Criminal Procedures, together with official UAE Government cyber-law guidance. Laws, translations, regulations, technology and enforcement practice can change. This article is educational and should not be treated as legal advice or as a conclusion that any specific tracker, app or disclosure is lawful or unlawful.