The United Arab Emirates (UAE) does not have one broad federal law similar to the European Union AI Act. Instead, the UAE uses several laws, policies, sector rules, and government frameworks to control artificial intelligence. This model combines AI promotion with rules on privacy, cybersecurity, consumer rights, intellectual property, finance, healthcare, transport, and government services. The UAE has also created new institutions that can shape future AI laws and standards.
The UAE Charter for the Development and Use of Artificial Intelligence establishes important principles of responsible artificial intelligence. The charter promotes privacy, data security, transparency, human oversight, fairness, ethics, and safe use of AI. It is not a comprehensive AI law that governs every company and AI application. Rather, it gives clear direction for the use of AI in the country.
Also, the UAE Strategy for Artificial Intelligence 2031 aims to turn the country into a world leader in AI. With this strategy, the UAE promotes the usage of AI in such domains as healthcare, transport, energy, tourism, logistics, and cybersecurity. This is indicative of the policy of the UAE, which seeks the introduction of AI technologies at a fast rate while building good safeguards against them.
The Federal Decree-Law No. 45 of 2021 on Personal Data Protection forms a major part of UAE AI regulation. The law covers automated data processing and profiling, so it can apply when an AI system uses personal information. It gives people rights to receive information about automated decisions and certain forms of profiling. It also gives a person the right to object to an automated decision that creates a legal effect or a serious negative impact.
The law also requires impact assessments for certain high-risk data activities. A company may need such an assessment when it uses automated processing to assess personal aspects or when it handles large amounts of sensitive personal data. Certain high-risk activities can also require a Data Protection Officer. These rules make privacy a central part of AI governance in the UAE.
Financial services now have one of the clearest AI rule sets in the UAE. In February 2026, the Central Bank of the UAE issued guidance on consumer protection and responsible use of artificial intelligence and machine learning by licensed financial institutions. The guidance covers transparency, fairness, bias, accountability, explainability, data quality, privacy, security, and operational resilience.
The guidance also expects financial institutions to use reliable data, maintain suitable controls, test AI systems, and prepare for failures or cyber threats. This approach places responsibility on financial institutions rather than treating AI as an ordinary software tool.
The Dubai International Financial Centre possesses one of the UAE's more distinctive regulations regarding artificial intelligence. Regulation 10 of the DIFC Data Protection Regulations addresses both fully autonomous and semi autonomous systems capable of processing personal data. The rule allows for a series of requirements such as an impact assessment, risk assessment, transparency requirements and safety regulation as well as strict accountability for use of high-risk AI.
In June 2026, DIFC offered amendments to its Data Protection Regulation. It suggested a series of additional privacy and security measures to the regulation as well as the establishment of an Autonomous Systems Officer. It should be kept in mind that the consultation procedure finishes in July 2026 and thus the proposals should not be considered final law.
The biggest recent change came in June 2026, when the UAE approved the creation of the Artificial Intelligence and Data Authority. The new authority brings together key federal functions related to AI, data, and digital government. Its duties include national AI policy, legislation proposals, AI standards, data governance, government AI systems, research, and international cooperation.
The new authority does not itself create a single UAE AI Act. However, it could become the main force behind future federal AI rules and standards.
Dubai also uses specific AI controls. The Dubai AI Seal provides a trusted status for companies that meet set standards for AI expertise, services, security, and responsible use. Dubai government entities have also received instructions to use AI Seal-certified suppliers for certain AI-related contracts.
Abu Dhabi has its Artificial Intelligence and Advanced Technology Council, which develops AI policy, technology strategy, research, infrastructure, and investment plans. Healthcare also has special AI policies, while Dubai has specific legislation for autonomous vehicles.
Also Read - Why US Lawmakers Are Divided Over Open-Weight AI
The UAE currently follows a layered AI regulation model rather than one comprehensive AI statute. Privacy law controls personal data and automated decisions. Cybercrime law can address unlawful AI use. Copyright law covers relevant creative and software rights. Financial, healthcare, transport, and free-zone regulators add further rules.
The creation of the Artificial Intelligence and Data Authority marks a major shift toward a more coordinated national system. The UAE's direction remains clear: rapid AI adoption, strong government use, sector-specific controls, and gradual development of dedicated AI governance.