#
AI policy infrastructure and one DIFC-specific binding regulation are documented; federal biometric/genetic/surveillance-carveout specifics are unconfirmed.
Sub-modules (6)
Profiling RestrictionsRed
No AE-specific profiling-restriction statute distinct from general PDPL principles was confirmed.
Absence provenance: unavailable. Searched: UAE artificial intelligence law regulation 2024 2025 AI governance Dubai.
Automated Decision Making TransparencyAmber
DIFC Regulation 10 specifically addresses processing of personal data through autonomous and semi-autonomous systems and is in force.
Claims (1):
- The DIFC's Regulation 10 on Processing Personal Data Through Autonomous and Semi-Autonomous Systems is in force.
Ai Risk AssessmentsAmber
UAE AI governance relies on strategy documents, ethics guidelines and self-assessment tools (e.g., AI System Ethics Self-Assessment Tool) rather than a binding AI risk-assessment statute.
Claims (2):
- UAE AI governance is conducted primarily through national strategy, ethical guidelines and sector-specific initiatives — including the UAE National Strategy for Artificial Intelligence 2031 — rather than through dedicated cross-sectoral AI legislation.
- In October 2024, the UAE Cabinet approved the country's International Stance on Artificial Intelligence Policy, and the UAE has issued non-binding guidance resources including an AI Ethics Principles and Guidelines document and an AI System Ethics Self-Assessment Tool.
Biometric RegimeRed
No AE federal-level biometric-data-specific regime was confirmed; ADGM's GDPR-aligned special-category definition (which would typically capture biometric data) is the closest available proxy.
Absence provenance: unavailable. Searched: UAE PDPL data subject rights right to access erasure objection cross border transfer adequacy list.
Genetic DataRed
No AE-specific genetic-data regime was confirmed in available sources.
Absence provenance: unavailable. Searched: UAE PDPL data subject rights right to access erasure objection cross border transfer adequacy list.
State Surveillance CarveoutsRed
No AE-specific state-surveillance carve-out provisions were confirmed in available sources.
Absence provenance: unavailable. Searched: UAE PDPL executive regulations 2024 issued Cabinet Decision breach notification timeline fine.
Algorithmic, Biometric & Surveillance Governance
The establishment of the Federal Authority for Artificial Intelligence and Data, effective 14 June 2026, is the material development for algorithmic governance in the UAE this cycle, not because it introduces new substantive AI rules but because of what it structurally consolidates. The new body absorbs the Office of Artificial Intelligence alongside the Information and Digital Government Sector of the Telecommunications and Digital Government Regulatory Authority and the previously non-operational UAE Data Office. The effect is that AI policy and data protection, two functions that in many jurisdictions sit in entirely separate regulatory bodies, are now administered by a single Cabinet-reporting authority in the UAE.
As far as this cycle's research has established, the 2024 UAE Charter for Artificial Intelligence remains the sole AI-specific instrument in the jurisdiction, and it is non-binding in character. No new binding AI-specific statute, nor any AE-specific rule on automated decision-making, profiling, or biometric processing, was located this cycle to supplement or formalise the Charter's non-binding principles. The consolidation of AI policy and data-protection functions into one authority is therefore, at this stage, a structural rather than a substantive development: it changes who administers both mandates, but it has not yet, on the evidence available this cycle, produced new binding rules governing algorithmic or biometric processing specifically.
This structural pairing is nonetheless significant for how algorithmic governance is likely to evolve in the UAE going forward, since any future binding AI-specific rulemaking would now emerge from the same body that administers the Personal Data Protection Law, creating a natural institutional path for data-protection and AI-governance requirements to be developed in a more integrated fashion than would be possible under separate agencies.
Outlook
Whether the Federal Authority for Artificial Intelligence and Data uses its newly consolidated mandate to move the 2024 UAE Charter for Artificial Intelligence toward binding status, or to issue new rules specifically addressing algorithmic decision-making or biometric processing, is the key open question for this domain going forward. The institutional consolidation itself is a necessary precondition for more integrated rulemaking, but it is not, on its own, evidence that such rulemaking is imminent, and no dated commitment to issue binding AI-specific rules was located this cycle.
1 further periodic run re-emitted the standing brief unchanged and is not shown.
Sources and claims (3)
- ProbableIAPP — The DIFC's Regulation 10 on Processing Personal Data Through Autonomous and Semi-Autonomous Systems is in force.observed
- ProbableIAPP — UAE AI governance is conducted primarily through national strategy, ethical guidelines and sector-specific initiatives — including the UAE National Strategy for Artificial Intelligence 2031 — rather than through dedicated cross-sectoral AI legislation.observed
- ProbableIAPP — In October 2024, the UAE Cabinet approved the country's International Stance on Artificial Intelligence Policy, and the UAE has issued non-binding guidance resources including an AI Ethics Principles and Guidelines document and an AI System Ethics Self-Assessment Tool.observed