detect·deepfakesby Resemble AI
Deepfake law · United Arab Emirates

Deepfake Law in the United Arab Emirates

The UAE regulates deepfakes through Federal Decree-Law No. 34 of 2021 on Countering Rumors and Cybercrimes, plus UAE AI Strategy 2031 guidance. Strict criminal framework with substantial penalties.

Status
enacted
Jurisdiction
United Arab Emirates
Effective
Jan 2022
Statute
Federal Decree-Law No. 34 of 2021 (Cybercrimes Law)
AI-manipulated content misusePrivacyDefamationNational security
Updated Apr 16, 2026 · 2 min read

The UAE has one of the more assertive criminal frameworks for deepfakes in the Middle East, combining the 2021 Cybercrimes Law with AI-specific guidance under the UAE AI Strategy 2031.

Key provisions

Federal Decree-Law No. 34 of 2021 on Countering Rumors and Cybercrimes. Article 44 specifically addresses AI-generated content used to harm individuals or institutions. Covers:

  • Creating or spreading deepfake content that affects state security or stability.
  • AI-manipulated imagery used for defamation, extortion, or to damage reputation.
  • Use of deepfakes for fraud (Article 40).

Penalties range from six months to life imprisonment for the most severe cases, plus fines up to AED 3 million (~$820K USD). Article 44 specifically targets synthetic media misuse.

UAE AI Strategy 2031. Sets national framework for AI governance; includes principles for responsible AI use, though direct enforcement comes through the Cybercrimes Law and Personal Data Protection Law.

Personal Data Protection Law (2021). Biometric data provisions cover voice and facial features.

UAE Media Regulatory Office. Authority over media content including AI-generated; can order takedowns and impose licensing conditions on media operators.

Enforcement context

UAE enforcement is swift and impactful. Prosecutions under Article 44 for deepfake-related offenses have been numerous since 2022. Cases have included:

  • Financial fraud via deepfake CEO calls targeting UAE-based finance operations.
  • Defamation cases involving manipulated imagery of public figures.
  • Non-consensual intimate imagery (though victims sometimes face separate legal exposure under moral-law provisions).

Practical implications

For organizations operating in the UAE:

  • AI service providers: strict content-filtering obligations; services enabling misuse face both civil and criminal risk.
  • Platforms: Media Regulatory Office takedown orders are binding; compliance essential.
  • Enterprises: high-stakes environment. Fraud prevention (including deepfake-resilient controls for financial operations) is effectively required.

Sources