Federal Decree-Law on Combating Rumours and Cybercrime, hacking offences
Federal Decree-Law No. 34 of 2021, Arts. 1-3 (Hacking)
A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.
In force since 2 January 2022.
A computer misuse rule binding public and private bodies.
As of 6 September 2026.
What it requires
- Do not access, or remain on, a website, information system, computer, or information network without authorization, in violation of a licence, or illegally.
- Reading a public, unauthenticated page without defeating any access control has not itself been held to fall inside or outside this section.
If you get it wrong
Criminal exposureYes
Private right of actionNo
Criminal exposure note
Art. 2(1): imprisonment and/or a fine of AED 100,000 to 300,000 for hacking a website, information system, network, or ITE. Art. 2(2): imprisonment of at least six months and/or a fine of AED 150,000 to 500,000 where the hacking causes damage, destruction, interruption, or the cancellation, disclosure, alteration, copying, or dissemination of data. Art. 2(3): imprisonment of at least one year and/or a fine of AED 200,000 to 500,000 where the hacking is committed to acquire data or information for illegal purposes. Art. 3 sets materially higher penalties, including temporary imprisonment, for the same conduct against a government entity's systems.
Penalty structure
Three tiers under Art. 2 alone: AED 100,000 to 300,000 (base offence), AED 150,000 to 500,000 (damage or disclosure results), and AED 200,000 to 500,000 (illegal-purpose acquisition), each also carrying imprisonment. AED 500,000 is the highest fixed ceiling of the three; Art. 3's government-entity variant is materially higher again.
- Rule
- Fixed only
- As of
- 6 September 2026
- Currency
- AED
- Fixed cap
- 500,000
What this law does
Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.
Article 1 defines Hacking as the unauthorized access, access in violation of the provisions of a license, or illegal access to or stay on an information system, a computer, an operating system, or an information network.
Article 2 punishes hacking a website, electronic information system, information network or piece of information technology equipment with imprisonment and a fine of not less than AED 100,000 or more than AED 300,000; the penalty rises to imprisonment of at least six months and a fine of AED 150,000 to 500,000 where the hacking causes damage, destruction, interruption, or the copying or disclosure of data, and to imprisonment of at least one year and a fine of AED 200,000 to 500,000 where it is committed to acquire data or information for illegal purposes.
The offence's definition turns on access being unauthorized, in violation of a licence, or illegal, and does not on its own terms require defeating a technical security measure. Article 3 imposes materially higher penalties, including temporary imprisonment, where the same conduct targets a government entity's systems.
When LexLint raises it
crawls_webtrains_models
Read the law
official consolidated Decree-Law text, UAE Legislation portal