Federal Decree-Law No. (34) of 2021 Concerning the Fight Against Rumours and Cybercrime
Federal Decree-Law No. (34) of 2021
The UAE cybercrime law criminalises unlawful access, system and data attacks, electronic fraud, privacy violations, extortion, prohibited online content, rumours and false information, and sets digital enforcement and jurisdiction rules.
Overview
What this legislation covers
The UAE cybercrime law criminalises unlawful access, system and data attacks, electronic fraud, privacy violations, extortion, prohibited online content, rumours and false information, and sets digital enforcement and jurisdiction rules.
Who or what it applies to
- Persons using information networks, websites, electronic systems and digital platforms where UAE criminal jurisdiction applies.
- Operators and users of electronic information systems, digital accounts and online services.
- Conduct occurring inside the UAE and certain conduct outside the UAE where statutory jurisdictional links exist.
- Digital evidence and enforcement may also engage the Criminal Procedure Law and Evidence legislation.
Key points
Important points at a glance
Entered into force on 2 January 2022 and repealed the prior federal cybercrime decree-law.
Criminalises unauthorised access to electronic systems, sites, networks and data.
Provides enhanced protection for government, financial, health and other protected systems/data.
Criminalises damaging, disrupting, deleting, modifying or leaking electronic data in specified circumstances.
Regulates electronic fraud, payment-instrument offences and online impersonation.
Criminalises electronic extortion and threats in specified circumstances.
Contains offences involving privacy, recording, disclosure, defamation and misuse of personal material.
Contains offences concerning unlawful or prohibited online content, including specified sexual, gambling, narcotics and medical-product conduct.
Part Two addresses rumours, false news and content affecting public order or public interests.
Contains offences involving state security, terrorism-related content and specified unlawful organisations.
Provides confiscation, closure/blocking and other supplementary measures.
Contains jurisdiction rules for cyber offences with UAE connections.
Article 74 sets the 2 January 2022 commencement date.
Later related legislation includes the Personal Data Protection Law, media legislation and the Child Digital Safety framework.
Practical explanation
Understanding the law
Purpose and practical effect
The UAE cybercrime law criminalises unlawful access, system and data attacks, electronic fraud, privacy violations, extortion, prohibited online content, rumours and false information, and sets digital enforcement and jurisdiction rules.
Who the law applies to
- Persons using information networks, websites, electronic systems and digital platforms where UAE criminal jurisdiction applies.
- Operators and users of electronic information systems, digital accounts and online services.
- Conduct occurring inside the UAE and certain conduct outside the UAE where statutory jurisdictional links exist.
- Digital evidence and enforcement may also engage the Criminal Procedure Law and Evidence legislation.
Key definitions
- Information Network, Electronic Information System and Information Technology Means are statutory technical concepts.
- Electronic Data / Electronic Document concepts determine the objects protected by many offences.
- Website, Electronic Account and other defined digital resources are used throughout the offence provisions.
- Rumour and content-related offences must be assessed using the exact statutory elements rather than ordinary-language labels.
Main rights, duties and legal consequences
- Users must not access systems or data without lawful authority.
- Persons must respect privacy and confidentiality and avoid prohibited publication/disclosure conduct.
- Platform and account use may create criminal exposure where used for fraud, threats, impersonation or prohibited content.
- Authorities and courts may order technical and supplementary measures where the statutory conditions are met.
Practical compliance / procedure checklist
- Identify the exact digital act, account/system involved and the actor's authority or lack of authority.
- Preserve device, account, message, log and platform evidence without altering it.
- Map the conduct to the exact offence article; do not infer an offence only from a broad description such as 'false news'.
- Determine UAE territorial or extraterritorial jurisdiction.
- Coordinate cybercrime, criminal procedure, evidence, data-protection and sector-specific rules where they overlap.
Deadlines and effective dates
- Effective date: 2 January 2022.
- Criminal limitation, appeal and procedural periods are governed by the applicable Crimes and Penalties / Criminal Procedure framework and the offence classification.
- Platform preservation and evidence steps may be urgent even when the substantive law contains no single general filing deadline.
Enforcement, violations and penalties
This is criminal legislation. It provides imprisonment, fines and supplementary measures depending on the precise offence. Because penalty ranges vary significantly and some offences are aggravated by protected systems, public interests or outcomes, the exact current article should be checked before stating a punishment.
Practical scenarios
- Accessing another person's account without permission can trigger cybercrime exposure even if no physical property is taken.
- Publishing private recordings or personal material without lawful basis may engage privacy/cybercrime provisions.
- An online fraud using a payment instrument can trigger both cybercrime and general criminal-law offences.
- A disputed social-media post should be analysed against the specific statutory elements, context and intent rather than categorised generically.
Amendments and implementation
Use the current official consolidated text and related criminal, data-protection, media and child-digital-safety legislation where applicable.
Legal research caution
The principal federal statute, its amendments, Executive Regulations, Cabinet/Ministerial/FTA/MOHRE/TDRA decisions and sector-specific rules can operate together. Commentary in this file explains practical operation but does not create duties beyond enacted law. Always confirm the current version applicable to the date and facts in question.
Research status
Official-source review for this package was updated on 2026-09-07.
Practical notes
- Use the official current Arabic text for interpretation and application; the English package is a structured legal-information rendering.
- Verify the current consolidated version and related regulations immediately before a filing, transaction, enforcement decision or court submission.
- Exact penalties, thresholds, exceptions and procedural deadlines must be checked against the exact current article and implementing instrument.
- The supplied cover artwork is used as an editorial cover only and is not a source of legal authority.
Legislation text
Text and provisions
Official-text notice. This file is a comprehensive structured English legal-information rendering based on the official UAE sources listed in this package. It is not presented as a verbatim legally controlling English reproduction. For interpretation and application, consult the original Arabic text, the Official Gazette and the latest consolidated official legislation. Exact offence elements, penalties, exceptions, thresholds and deadlines must be checked against the current article.
Federal Decree-Law No. (34) of 2021 Concerning the Fight Against Rumours and Cybercrime
Verified legislative metadata
| Instrument | Federal Decree-Law No. (34) of 2021 |
|---|---|
| Issued | 2021-09-20 |
| Effective | 2022-01-02 |
| Status | Active / in force |
| Official source | Official UAE source |
Legislative purpose and coverage
The UAE cybercrime law criminalises unlawful access, system and data attacks, electronic fraud, privacy violations, extortion, prohibited online content, rumours and false information, and sets digital enforcement and jurisdiction rules.
Complete statutory structure and principal provisions
Definitions and general cyber offences
Defines information technology concepts and criminalises specified unauthorised access, system interference and data-related acts.
Protected systems and data
Provides stricter treatment for attacks involving government, banking, health or other protected electronic resources.
Electronic fraud and financial offences
Addresses online fraud, electronic payment instruments, account misuse and technology-enabled misappropriation.
Identity, accounts and impersonation
Regulates creation/use of false accounts, impersonation and misuse of electronic identities in specified circumstances.
Privacy, confidentiality and reputation
Covers specified unlawful interception, recording, disclosure, privacy invasion, defamation and publication of private content.
Extortion and threats
Criminalises electronic threats or coercive conduct where the statutory elements are met.
Prohibited content and online activities
Contains specific offences involving pornography, gambling, narcotics, medical products, unlawful promotion and other prohibited content.
Cyberbegging and misuse of communications
Contains offences addressing begging and certain unlawful uses of communications or broadcast channels.
Rumours and false information
Part Two creates offences concerning false information, rumours and misleading content where the statutory public-interest elements are satisfied.
Public order, security and unlawful organisations
Contains specialised offences concerning state security, terrorism, public order and prohibited organisations/content.
Procedural and supplementary measures
Provides for confiscation, blocking, closure, deportation in specified cases and other court/enforcement measures.
Jurisdiction, repeal and commencement
Defines jurisdictional reach, repeals the previous cybercrime decree-law and took effect on 2 January 2022.
Key statutory points
- Entered into force on 2 January 2022 and repealed the prior federal cybercrime decree-law.
- Criminalises unauthorised access to electronic systems, sites, networks and data.
- Provides enhanced protection for government, financial, health and other protected systems/data.
- Criminalises damaging, disrupting, deleting, modifying or leaking electronic data in specified circumstances.
- Regulates electronic fraud, payment-instrument offences and online impersonation.
- Criminalises electronic extortion and threats in specified circumstances.
- Contains offences involving privacy, recording, disclosure, defamation and misuse of personal material.
- Contains offences concerning unlawful or prohibited online content, including specified sexual, gambling, narcotics and medical-product conduct.
- Part Two addresses rumours, false news and content affecting public order or public interests.
- Contains offences involving state security, terrorism-related content and specified unlawful organisations.
- Provides confiscation, closure/blocking and other supplementary measures.
- Contains jurisdiction rules for cyber offences with UAE connections.
- Article 74 sets the 2 January 2022 commencement date.
- Later related legislation includes the Personal Data Protection Law, media legislation and the Child Digital Safety framework.
Amendments, executive regulations and related legislation
Use the current official consolidated text and related criminal, data-protection, media and child-digital-safety legislation where applicable.
Reading rule for case-specific use
This structured rendering is designed to give the website a complete substantive map of the legislation and its operative areas. Where a legal conclusion turns on precise wording, an article number, a penalty, an exception, an implementing decision or a transitional rule, the official Arabic text and current related legislation must be used before reliance.
Verification
Official source & references
Official legislation sourcehttps://uaelegislation.gov.ae/en/legislations/1526Open ↗This page is a research and educational resource. Legislation can be amended, repealed, supplemented by regulations or interpreted by courts and authorities. Obtain advice before relying on it for a live matter.