The United Arab Emirates is positioning itself as a global leader in artificial intelligence — and that ambition is now backed by a formal legal and regulatory structure. In 2026, both the emirate of Dubai and the broader federal government have moved to create frameworks that govern AI development, deployment, and compliance. This guide covers every layer of UAE AI regulation and what it means for businesses operating in the region.
The Two-Track UAE AI Regulatory Framework
It is important to understand that UAE AI regulation operates on two levels simultaneously:
- Emirate level: Dubai has enacted its own AI-specific legislation — the Dubai AI Act — which applies across all sectors operating within Dubai
- Federal level: The federal government governs AI through sector-specific regulations, data protection law (PDPL), and the non-binding National AI Strategy 2031
As of mid-2026, there is no single comprehensive federal AI statute in the UAE comparable to the EU AI Act. The regulatory landscape is instead a layered combination of federal strategy, sector rules, and emirate-level legislation.
Dubai AI Act — What It Is and What It Requires
The Dubai Artificial Intelligence Act is a landmark piece of legislation issued by the Government of Dubai. It became effective in March 2026, with a compliance transition period extending to January 2027 — giving organisations operating in Dubai time to align their AI systems with the new requirements.
What the Dubai AI Act Covers
The Dubai AI Act establishes a risk-based framework for AI regulation, similar in structure to the EU’s approach but tailored to Dubai’s economic and governance context. Key provisions include:
- UAE AI Authority: Establishment of the UAE AI Authority as an independent regulatory body overseeing AI governance across sectors
- High-risk AI classification: Certain AI applications are classified as high-risk and subject to mandatory conformity assessments, impact assessments, and registration before deployment
- Prohibited AI practices: The Act explicitly prohibits AI applications that involve social scoring systems, subliminal manipulation of human behaviour, real-time emotion recognition in workplaces and educational settings, and predictive policing based solely on AI profiling
- Transparency requirements: AI systems interacting with the public must be disclosed as AI; deepfakes and synthetic media used in commercial or public contexts require labelling
- Accountability framework: Organisations must designate AI governance officers for high-risk deployments and maintain documentation of AI system design, training data, and decision logic
Who Must Comply
Any organisation developing, deploying, or operating AI systems within Dubai — across government, healthcare, finance, retail, media, and other sectors — must comply with the Dubai AI Act’s requirements before the January 2027 deadline. This includes multinational companies operating in Dubai’s free zones, subject to how the Act’s territorial scope is applied.
Federal-Level AI Governance
National AI Strategy 2031
The UAE National AI Strategy 2031 is the federal government’s overarching policy framework for AI development. Launched in 2017 and updated in subsequent years, it sets national targets across key sectors: government services, transport, healthcare, education, energy, and tourism. The Strategy is not a binding statute — it is a government policy agenda — but it has driven substantial public sector AI investment and shapes procurement and development priorities across the federal government.
Personal Data Protection Law (PDPL)
The UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) applies to AI systems that process personal data of UAE residents. For AI applications involving profiling, automated decision-making, or processing sensitive personal data, the PDPL creates direct compliance obligations — including data subject rights, consent requirements, and cross-border transfer restrictions.
Sector-Specific AI Regulations
Several federal regulators have issued sector-specific AI guidance:
- Central Bank of UAE (CBUAE): Guidance on AI and machine learning use in financial services, credit underwriting, and fraud detection
- Securities and Commodities Authority (SCA): Rules on algorithmic trading and AI-driven investment systems
- Ministry of Health (MoHAP) and Dubai Health Authority (DHA): Requirements for AI-based medical devices, diagnostic tools, and clinical decision support systems
Dubai Data and AI Authority (DDAIA)
The Dubai Data and AI Authority (DDAIA) is the emirate-level body responsible for implementing AI governance in Dubai. It operates the dubai pulse data platform and has published AI Ethics Principles for Dubai government entities. DDAIA plays a central role in administering the Dubai AI Act and works with both public and private sector stakeholders on AI policy.
UAE AI Investments — The Economic Context
The UAE’s regulatory push on AI is matched by significant economic investment:
- Stargate UAE: In 2025–2026, the UAE entered a landmark partnership with US AI companies under the Stargate initiative, with up to 200 megawatts of AI-dedicated data centre capacity planned to come online, representing billions of dirhams in committed investment
- Mohamed bin Zayed University of Artificial Intelligence (MBZUAI): The world’s first graduate-level AI-focused university, based in Abu Dhabi’s Masdar City, actively produces AI research and talent
- G42: Abu Dhabi-based AI and cloud computing group, with significant international investment partnerships and a portfolio spanning healthcare AI, defence AI, and enterprise software
- Hub71 and Abu Dhabi’s AI ecosystem: Abu Dhabi’s technology hub has attracted AI startups with dedicated funding programmes and regulatory sandboxes
Compliance Checklist for Businesses in Dubai
For businesses operating AI systems in Dubai, here is a practical compliance checklist ahead of the January 2027 deadline:
- Conduct an AI system inventory — identify all AI tools in production use across your organisation
- Classify each system by risk level under the Dubai AI Act framework (high-risk, limited-risk, minimal-risk)
- For high-risk systems: complete an AI impact assessment and prepare technical documentation of model design, training data, performance metrics, and bias testing
- Review your PDPL compliance posture for any AI system processing personal data
- Implement transparency disclosures for any customer-facing AI interactions
- Designate an AI Governance Officer or equivalent responsible for ongoing compliance
- Monitor DDAIA and UAE AI Authority guidance as secondary implementing regulations are issued during the transition period
Frequently Asked Questions
Is there a single federal UAE AI law?
Not as of mid-2026. AI is regulated at the federal level through sector-specific rules, data protection law, and national strategy — but no single comprehensive federal AI statute comparable to the EU AI Act has been enacted. The Dubai AI Act is the most comprehensive AI-specific legislation in the UAE, but it applies at the emirate level.
Does the Dubai AI Act apply to free zone companies?
The territorial scope of the Dubai AI Act for free zone entities is subject to ongoing regulatory clarification by DDAIA. Companies in Dubai free zones (DIFC, JAFZA, etc.) should seek legal counsel specific to their free zone jurisdiction and sector.
What AI applications are banned in Dubai?
The Dubai AI Act prohibits social scoring systems, subliminal manipulation, real-time emotion recognition in workplaces and educational environments, and predictive policing based solely on AI profiling. Organisations should review the full Act text published by DDAIA for the complete prohibition list.
When does the Dubai AI Act compliance deadline fall?
January 2027. The Act became effective in March 2026, with an approximately 10-month transition period for organisations to achieve compliance.
Related Reading
- Dubai Crypto Regulation 2026: VARA Framework
- Saudi Arabia Fintech 2026: SAMA and Digital Payments
- Bahrain Fintech Hub 2026: FinTech Bay & CBB Sandbox
Also Read: Dubai Crypto Regulation 2026: VARA Licensing, Rules and What Investors Must Know | UAE Golden Visa 2026: Every Category, Verified Costs and How to Apply | UAE Health Insurance 2026: Essential Benefits Plan, Costs and Employer Obligations
