Introduction:
As part of the comprehensive cybercrime law, offences such as hacking, manipulating information systems, breaching personal data, and manipulating electronic documents are all subject to criminal penalties. The UAE has strengthened its efforts to combat rumours and cybercrime by implementing Federal Decree-Law No. 34 of 2021.
According to cyber law under articles 2 and 3, an act of hacking into websites, electronic information systems, or networks is considered a serious offence. In the event that an individual is found guilty of hacking, they may be subject to detention as well as fines ranging from AED 100,000 to AED 300,000. For those who target the government organizations of the country, the penalties may be increased if the hacking results in damage or disclosure of data. Offenders may face imprisonment for up to five years and fines ranging from AED 250,000 to AED 1,500,000 for their actions.
According to Articles 4 and 5, if someone intentionally damages or disrupts information systems, they may face detention and fines ranging from AED 500,000 to AED 3,000,000. Furthermore, compromising the systems of state institutions or critical facilities carries even more penalties, including provisional imprisonment and fines of up to AED 3,000,000, particularly if the offence is committed through a cyber-attack.
According to Articles 6 and 7, If personal data is accessed, modified, or disclosed without authorization, the offenders may be subject to detention as well as fines ranging from AED 20,000 to 100,000 AED. Further, those who violate the confidentiality of government data are subject to severe penalties, with offenders facing provisional imprisonment for up to 10 years and fines of up to AED 5,000,000 for compromising state operations or security facilities.
Article 8 regulates the breach of data belonging to establishments that are responsible for financial, commercial, or economic transactions. In accordance with this provision, individuals who obtain, modify, disclose, or otherwise interfere with the confidential data of such establishments without authorization through the use of information technology may be subject to provisional imprisonment for a minimum of five years and/or fines ranging from AED 500,000 to AED 3,000,000.
Unauthorized acquisition of secret numbers, codes, or passwords of websites or electronic systems may result in detention and fines ranging from AED 50,000 to AED 100,000. Furthermore, enabling others to access such systems for criminal purposes increases the penalty to a minimum of six months' detention and fines from AED 300,000 to AED 500,000.
In addition, this law addresses several types of other cyber offences, such as the manipulation of information networks and the use of electronic documents that have been forged. These offences are addressed in Articles 8 to 19 of the cyber law. Individuals who fabricate mail, websites, or electronic accounts are subject to detention and fines ranging from AED 50,000 to 200,000 AED depending on the severity of the offense, as stated in Article 11. Online activities that include misrepresentation or fraudulent representation are also included in the scope of this article.
Articles 12 to 19 also cover offences like unlawful interference and disclosure of information, violations of personal data collection, electronic document forgery, electronic payment method breaches, and other types of misuse of electronic systems. However, depending on the seriousness of the offence that was committed, offenders may be subject to either detention or fines, or both.
Related Links
About the Author
Dr. Hassan Elhais publishes analysis of UAE criminal law matters, including online allegations, digital communications and cybercrime-related legal issues. For readers researching a cybercrime lawyer in Dubai, his writing offers insight into the legal questions surrounding these topics. Explore his published work and practice-area information for further context.
Copyright © of this article is retained by the author and/or other copyright owners. We explicitly grant you permission to download a copy, without any alteration, of this article
for personal non-commercial research or study, without prior permission or any charge. This article can be utilized on your website or for marketing, however, we grant you permission
to host this article on your website and no other rights. This content should not be altered in any way or sold commercially in any format without prior permission of the copyright holder.
During reference of this article, full biographic details entailing the name of the author, his designation, the institute and the publishing date of the article shall be provided.