AI Agents & Engineering

Responsible AI in the UAE: What Businesses Should Know

Using AI in the UAE? Learn about the national AI charter, data protection law, DIFC rules and the simple safeguards every business should have in place.

Balance scale holding a glowing microchip on one side and a shield on the other

Quick answer

Responsible AI in the UAE means using AI in line with the national AI charter, data protection law and the rules of your sector or free zone. In practice, businesses should be open about AI use, protect personal data, keep a person accountable for important decisions, check accuracy, and record what each AI system is allowed to do.

What guidance applies to AI in the UAE?

Businesses need to look at several layers rather than a single document:

  • The UAE Charter for the Development and Use of AI, a 2024 statement of 12 principles covering areas such as safety, privacy, transparency, bias and human oversight. It is guidance rather than a binding law, but it shows what the country expects.
  • The Personal Data Protection Law, Federal Decree-Law No. 45 of 2021, for most personal data handled onshore.
  • The DIFC and ADGM financial free zones, which have their own data protection laws. The DIFC's Regulation 10 specifically covers personal data processed by autonomous and semi-autonomous systems.
  • Sector rules for areas such as health, banking and telecoms.
  • The cybercrime law, Federal Decree-Law No. 34 of 2021, which matters if a system publishes false or harmful content.

What safeguards should every business have?

  1. Keep a list of each AI system, what it does and who owns it.
  2. Tell people when they are dealing with AI.
  3. Collect only the personal data you need, and know where it is stored.
  4. Keep a person responsible for decisions that seriously affect someone.
  5. Check outputs for accuracy and unfair bias, on a regular schedule.
  6. Log what the system does, and limit what it can access.
  7. Agree in writing how each AI provider may use your data.

What should AI systems avoid?

Respect for people and the law applies to AI output just as it does to anything your staff say. Make sure your systems cannot publish false claims, imitate a real person's voice without permission, or produce content that is offensive to religion, culture or public values in the UAE. Filters help, but human review of anything published is still the safest approach.

Who is responsible when AI gets something wrong?

Using AI doesn't remove your responsibility for what your business says and does. Agree with suppliers who handles what, keep records, and have a clear way to correct mistakes and respond to complaints.

AI Engineers on DemandAI engineers by project, week or month, who build agents and automation around your tools.

This article is general information. It is not legal, tax or financial advice, and rules can change. Please check the current requirements for your business.

FAQ

Questions about this topic

Does the UAE have an AI law?

AI in the UAE is shaped by a combination of the national AI charter, data protection law, cybercrime law, free zone regulations and sector rules. This area is developing quickly, so check the current position with a legal adviser rather than relying on a summary that may have dated.

Does the UAE data protection law apply to AI?

If an AI system handles personal data, data protection rules are relevant. Onshore businesses should review Federal Decree-Law No. 45 of 2021. Companies in the DIFC or ADGM follow those free zones' own laws. Check the latest status of the federal regulations before finalising your approach.

Should we tell customers we use AI?

Yes. Being open builds trust, and the UAE's AI charter emphasises transparency. Tell people when they are speaking with an AI agent, explain what happens to their information, and make it simple to reach a person. It costs very little and prevents misunderstandings later.

Your next step

Want this working in your business?

Start with one problem. We'll show you where AI can create the most value.