The UAE Cybercrime Law — Federal Decree-Law No. 34 of 2021 — consolidated and modernised the UAE's framework for digital offences. For content creators, influencers, and any business operating digital platforms or producing online content directed at UAE audiences, it is one of the most consequential pieces of UAE legislation. The penalties are significant, the enforcement is active, and the framework has shaped what creators and digital businesses can and cannot do in the UAE.

What the law covers (and why creators care).

The Cybercrime Law criminalises a broad range of digital conduct. The categories most relevant to creators and digital businesses:

  • Unauthorised publication of private content — photos, videos, messages or information about another person without consent.
  • Defamation and insult — online statements that damage another person's reputation or honour.
  • Spreading false news or rumours — particularly where it threatens public order, public health, or national interests.
  • Insulting religion, religious figures or sacred symbols.
  • Content that disturbs public morals or family values.
  • Hacking, unauthorised access, fraud, identity theft — the more traditional cyber-offence categories.
  • Operating unlicensed online activity — including unauthorised commercial promotion (which intersects with the MRO Influencer Licence framework).

The penalty framework.

Penalties under the Cybercrime Law are substantial. Specific offences carry imprisonment terms (ranging from months to several years for serious offences) and fines in the hundreds of thousands to millions of dirhams. For non-UAE-nationals, conviction can include deportation. The law is enforced actively — the UAE Public Prosecution and the Federal Public Prosecution for Information Technology Crimes operate dedicated units.

The offences most commonly arising in the creator economy.

1. Unauthorised publication of another person's content.

Posting another person's photo, video, audio or message without their consent — even on a private story or in a closed group — can constitute an offence. The risk arises in:

  • Reposting private images of a partner, ex-partner or family member.
  • Sharing screenshots of private conversations.
  • Posting content from gatherings without all attendees' consent.
  • Reaction videos or commentary using content the creator did not produce.

2. Defamation, insult and reputational attack.

Online statements criticising another person — particularly in ways that affect honour, reputation or family standing — can give rise to defamation or insult complaints. The threshold is materially lower than in many other jurisdictions; statements that would be permitted satire or fair comment elsewhere can trigger complaints in the UAE.

3. False or misleading content.

Spreading misinformation, even unintentionally — particularly content that affects public order, health, national security or markets — can constitute an offence. Creators who comment on news, breaking developments or controversial topics need particular care.

4. Content on religion, morals, family.

The UAE applies a higher standard than many Western jurisdictions on religious content, public morals and family-values content. Creators producing content on these topics need to apply UAE-specific judgement, not Western-default judgement.

5. Unauthorised commercial promotion.

The Cybercrime Law intersects with the MRO Influencer Licence framework. Unauthorised commercial promotion — running brand deals or monetising content without an MRO licence — can engage Cybercrime Law provisions in addition to the MRO penalties.

The single most common Cybercrime Law exposure I see in the creator economy is reaction content — creators reposting, criticising or commenting on another person's content without considering the unauthorised-publication and defamation risks. The framework is materially less permissive than US fair-use or UK fair-comment doctrine.

How complaints are made.

Cybercrime complaints are typically filed by:

  • The aggrieved party — the person whose privacy, reputation or rights have been affected.
  • A third party with standing — a family member, employer or other party with legitimate interest.
  • The authorities directly — where the content engages public-order or national-interest categories.

Complaints can be filed via the Public Prosecution online portal, through the local police, or via the dedicated cybercrime units. Investigation typically proceeds rapidly; preservation of digital evidence (screenshots, platform records, account information) is standard practice.

What happens in an investigation.

  1. Complaint received. Evidence preserved, digital records gathered.
  2. Initial summons. The respondent is called for questioning, often within days.
  3. Travel restrictions. In some cases a travel ban is imposed pending investigation.
  4. Investigation outcome. Referral to prosecution, settlement or dismissal.
  5. Prosecution and trial if charges proceed.

The compliance posture every digital business needs.

For creators, influencers and digital businesses operating in the UAE:

  • Content review protocol for sensitive categories — religion, family, public figures, news, controversial topics.
  • Consent documentation for content featuring others — participants in videos, guests on streams, subjects of commentary.
  • Crisis-response framework — if a complaint is made, the first 48 hours are critical. Pre-agreed legal contact, communications playbook, and platform-removal procedure.
  • Avoidance of reactive content — reposting private content, criticising other UAE residents publicly, commenting on UAE government / political topics.
  • Licensing alignment — MRO Licence in place; UAE-mainland or free-zone commercial vehicle properly registered.
  • Platform-terms compliance — each platform's UAE-specific terms (Instagram, TikTok, YouTube, X, Snapchat all have UAE-specific notice provisions).

What to do if a complaint is made.

  1. Do not respond publicly. Public statements, including denials, can compound the exposure.
  2. Preserve all communications and content. Including private messages, drafts, comments, and any related materials.
  3. Engage UAE-coordinated counsel immediately. Not after the summons.
  4. Consider voluntary content removal in some cases as part of a settlement posture.
  5. Address the parallel commercial dimension — brand deals affected, platform impact, broader reputational considerations.

Conclusion.

The UAE Cybercrime Law materially shapes what creators and digital businesses can do in the UAE. The penalties are significant, enforcement is active, and the framework is meaningfully less permissive than US or UK equivalents. The right compliance posture combines pre-emptive content discipline with a fast-response framework for the moments when a complaint arises. Neo Legal advises creators, influencers and digital businesses on Cybercrime Law compliance, brand-deal architecture, and the full creator-legal stack.