Federal Decree-Law No. 34 of 2021 marks a major change in the UAE’s regulation of digital technology. Before this, Federal Decree-Law No. 5 of 2012 was the main law that dealt with cyber crimes. But the rapid growth of social media and the move to digital government services meant that a stronger law was needed to deal with the “viral” nature of online content and the complexity of modern cyberattacks. The main goal of the 2021 law is to keep “social harmony” and “public order.” In the UAE, this means protecting the state’s reputation and the personal honor of its residents. The UAE legal system prioritizes people’s privacy and prohibits any speech that could incite civil disorder or propagate fear. This idea is reflected in the severity of the punishments, which are intended to be a strong deterrence to improper use of information technology.
The law covers both technical crimes like hacking and system tampering and content-based crimes like spreading false information, bullying people online, and publishing things that go against public morals. The law also makes it clear how businesses should be held responsible for the digital activities that their systems or employees allow.
Definitions and the Scope of Jurisdiction
Federal Decree-Law No. 34 of 2021 gives clear definitions of all the technical parts that fall under its jurisdiction so that enforcement is clear. These definitions are very important because they set the limit for criminal liability in a digital setting.
Definitions under Article 1
Information Technology: All the tools and systems used to create, process, store, share, or use electronic information, such as systems, programs, websites, networks, and other things.
Information Technology Method: Any device or system, magnetic, optical, electrochemical, or otherwise, used to process, store, or transmit electronic data, including any method that enables data storage or communication.
Information Network: A connection between two or more information technology systems, facilitating the exchange of data.
Illegal Content: Any content involving a punishable crime or whose publication or circulation may harm state security, sovereignty, public interests, public health or peace, international relations, election integrity, social harmony, or public trust in state authorities.
False Data: Rumors or news that are false or misleading, in whole or in part, whether by themselves or within their context.
Electronic Robot: A program created or modified to execute automated tasks quickly and in an efficient way.
Article 1 and later interpretations make it clear that the law applies to anyone, no matter where they are, if their digital actions have an effect in the UAE. This includes content that is aimed at a person living in the UAE, a local business, or the government’s reputation.
Legislation against online defamation and insulting language
The UAE legal system places a high value on protecting people’s reputations, and online defamation is seen as a serious crime rather than just a civil matter. Article 43 of Federal Decree-Law No. 34 of 2021 is the main law that covers this area. It talks about both defamation (slander) and using insulting language through digital means.
Slander and Insult under Article 43
When someone utilizes an information network or information technology system, and they either use language that diminishes their honor or dignity or attribute an incident to someone else that could lead to punishment or public contempt, they are in violation of Article 43 of the Federal Decree Law No. 34 of 2021.
Slander is generally believed to be the attribution of a particular incident, such as accusations of criminal activity or professional misconduct. On the other hand, “insult” is defined as using derogatory, demeaning, or offensive language without mentioning a particular fact.
The penalties are strict. A person found in violation may face detention and/or a fine ranging from AED 250,000 to AED 500,000. If the act is committed against a public servant in connection with their duties, this is treated as an aggravating circumstance. The provision applies regardless of whether the communication is public or private, provided it is made through an information network or a system for information.
UAE courts look at online defamation based on how it affects the person who made the statement. They use a “reasonable person” standard to decide if it is insulting or harmful to their reputation. Intent isn’t always important, but it does matter in crimes that violate privacy.
Article 44: Protecting Your Privacy and Personal Life
Article 44 of the UAE’s cybercrime law gives people a strong way to protect their privacy from digital technology. People often use this article when they share private messages, photos, or personal data.
The Criminalization of Unauthorized Digital Intrusion
Article 44 prohibits the use of an information network or any information technology means to breach the privacy of an individual or their family life. The law specifies several prohibited acts:
1. Eavesdropping and recording: It is illegal to intercept, record, or disclose conversations or communications without the consent of the parties involved.
2. Unauthorized photography: Taking photographs of others in either public or private places, and subsequently storing or sharing them without permission, is a criminal offense.
3. Publication of casualty photos: The law strictly forbids sharing photos or videos of the injured, the deceased, or victims of accidents and disasters.
4. Malicious publication of truth: The publication of news or images, even if true, is prohibited if the intent is to harm a person’s reputation.
Violation of Article 44 leads to severe legal consequences. A fine of AED 150,000 to AED 500,000 and/or a minimum six-month jail sentence may be imposed for violating someone’s privacy through the use of information technology. This includes recording or disseminating conversations, pictures, or data without permission, even if true, when done to harm.
Article 52: Spreading False News
Article 52 says that it is against the law to publish or share false information, fake news, or rumors that could hurt the economy, public health, or the public good. Violating the law will lead to at least detention for one year and a fine of at least AED 100,000. If the crime is against a state authority or happens during a crisis, the punishment goes up to at least two years of detention and AED 200,000.
Creating or using E-Robots under Article 54
Article 54 talks about how automated systems can be used to spread false information. Anyone who creates or changes an electronic robot to spread false information or news, or lets other people do it, shall be sentenced to detention for up to two years and/or fined between AED 100,000 and AED 1,000,000.
The penalty may be enhanced in cases when numerous people are implicated, reflecting the higher risk posed by coordinated or large-scale spread of misleading information.
If the offense involves altering or manipulating recordings or images for defamation or abuse, the penalty increases to a minimum of one year’s detention and/or a fine ranging from AED 250,000 to AED 500,000.
Combating false news, rumors, and inappropriate use of e-robots
According to Federal Decree-Law No. 34 of 2021 on Combating Rumors and Cybercrimes, spreading false information is a serious crime because it can affect public order, national security, and the economy. Articles 52 and 54 talk about spreading false information and using automated tools to spread that information far and wide.
Technical Cybercrimes: Hacking, Fraud, and Data Breaches
Beyond content-related offenses, the Federal Decree-Law No. 34 of 2021 on Combating Rumors and Cybercrimes establishes a comprehensive framework addressing technical cyber offenses that impact the security and integrity of information systems and digital data.
Unauthorized Access and Hacking (Articles 2 and 4)
Article 2 makes it illegal to access websites or information systems without permission. Penalties include detention and fines of AED 100,000 to AED 300,000, which increase if damage, disruption, or misuse of data occurs, and even more if the act is done for an illegal purpose.
Article 4 covers more serious crimes, like intentionally disrupting or damaging systems. The penalties are harsher, with fines ranging from AED 500,000 to AED 3,000,000 and provisional imprisonment.
Article 40: Online Fraud and Financial Crimes
Under Article 40, it criminalizes acts such as creating fake names or impersonation to illegally get movable property, benefits, documents, or signatures using information technology. This rule covers online scams that are meant to trick people and identity theft. If someone is found guilty, they shall be sentenced to at least one year of detention and/or pay a fine of AED 250,000 to AED 1,000,000.
Conclusion
The UAE’s laws against cybercrime and defamation show that the country regulates digital behavior, with a strong focus on protecting people’s privacy, dignity, and public order. The Federal Decree-Law No. 34 of 2021 deals with both traditional forms of defamation and the new risks that come with modern technology, such as false information, privacy violations, and online fraud.
One important thing to remember is that liability in the digital world is wide and strict. Statements made online, whether public or private, can lead to criminal charges. Even true information can be punished if it is shared in a way that hurts someone else’s privacy or reputation. The law also holds people who share or spread harmful content responsible, not just the people who create it.
