UAE Defamation Law Online: Claim, Complaint, Limits

UAE defamation law online is mainly criminal law. Federal Decree-Law No. 34 of 2021 on Countering Rumors and Cybercrimes punishes insulting another person, or attributing to them a quality that would expose them to punishment or contempt, through an information network, with imprisonment, a fine of AED 250,000 to 500,000, or both, and a civil claim for damages can follow a conviction.

That sets the United Arab Emirates apart from common-law countries, where defamation is mainly a civil wrong and the question is damages. Here the first question is whether a criminal offense was committed, who may complain, how fast, and whether the case can be settled. The answers sit in two statutes issued on the same day, the cybercrime law and the Crimes and Penalties Law (the Penal Code), plus the criminal procedure rules that decide how a complaint travels.

This article reads what those texts and the official government portal say, and marks every point that rests on legal commentary instead of the statute. It covers the federal onshore framework only. Free zones with their own courts, such as the DIFC and ADGM, are outside what we read.

The short version

Online insult and defamation are covered by Article 43 of the cybercrime law: imprisonment, a fine of AED 250,000 to 500,000, or both, with a harsher view where the target is a public official acting in their work.
Offline equivalents sit in the Penal Code, reported as Articles 425 (attributing an incident) and 426 (insult), with much lower fines.
For offenses that need a complaint, the government portal says a complaint is not accepted after three months from when the victim learned of the crime and the perpetrator.
The cybercrime law can reach conduct outside the UAE when it affects UAE nationals or residents, and it punishes publishers who ignore a removal order.
A civil claim for compensation is a separate track, and a criminal finding is reported to carry weight in it.

Three facts frame everything below, and each is read from an official page.

AED 250,000 to 500,000fine range in Article 43 of the cybercrime law, with or without imprisonment

Three monthswindow to complain, counted from learning of the crime and the perpetrator

Article 69the provision that extends the law to acts committed outside the UAE in four cases

Cybercrime law: UAE Legislation portal, English translation (Arabic prevails). Complaint window: u.ae page on criminal proceedings. Both read for this article.

UAE defamation law online: two statutes and a civil track

Three layers apply. The first is the cybercrime law, Federal Decree-Law No. 34 of 2021, which the UAE Legislation portal shows as issued on 20 September 2021, in force from 2 January 2022, and replacing the 2012 cybercrime decree-law. It governs anything done through an information network or technology device.

The second is the Penal Code, Federal Decree-Law No. 31 of 2021, issued the same day and in force from the same date. It covers defamation and insult in general, including speech outside any network. The portal page for it lists it as active, but the text of its defamation articles could not be read in the extract available to us, so what follows about them comes from named legal commentary.

The third is civil law. A practice guide published by Chambers describes defamation in the UAE as dual-track: a crime under the criminal statutes and a tort under the civil code. The civil track is about compensation for moral and material harm. It runs beside the criminal track.

Article 43 of the cybercrime law: what it says and what it reaches

Article 43, headed Defamation and Slander on the official portal, punishes anyone who uses an information network, technology equipment or an information system to insult another person, or to attribute to them a quality that would make them subject to punishment or contempt. The English translation gives the penalty as imprisonment, a fine, or both, with the fine running from AED 250,000 to 500,000. An unnumbered second paragraph makes it an aggravating circumstance when the offense is committed against a public official, or a person entrusted with a public service, during or because of their work.

Three features of the wording matter in practice.

It covers two different things. Insult and attribution are separate limbs. An insult needs no factual accusation, and an attribution needs no abuse. A post calling a business owner a thief does the first. A post saying that a named person was convicted of fraud, true or not, does the second.

It is defined by the channel, not by the audience. The text speaks of using a network or a device. The article as read has no requirement of publicity. The Chambers guide reports a Dubai Court of Cassation judgment of 23 April 2025 (No. 2024/1222) that treated WhatsApp as an information technology medium and held publicity not to be a crucial requirement for criminal liability, and a Mondaq commentary on the Penal Code says a message counts as published once it reaches one third party. Those are secondary reports of judgments we could not read, so the safe assumption is that a message to one person can be enough.

It is often charged beside related offenses. Article 44 covers invading someone's privacy or family life by recording or publishing images or data, and the text says it applies even if the material is true and genuine when the intent is to harm. Article 42 covers extortion and threats through a network. One online dispute can therefore produce more than one count.

Provision	What it punishes	Penalty as read
Article 43	Insult, or attributing a quality that exposes to punishment or contempt	Imprisonment and/or AED 250,000 to 500,000
Article 44	Invading privacy or family life, even with true material, intending harm	At least 6 months and/or AED 150,000 to 500,000
Article 44, altered media	Changing a photo or recording to defame or insult	At least 1 year and/or AED 250,000 to 500,000
Article 42	Threats or extortion through a network	Up to 2 years and/or AED 250,000 to 500,000; up to 10 years if the threat involves a crime or dishonorable acts with a demand

Penal Code articles 425 and 426: the offline provisions beside it

The Penal Code splits the field the way continental systems do. Legal commentary, including a Clyde & Co note and a Khaleej Times legal column by a Dubai-qualified lawyer, reports that Article 425 covers publicly attributing to someone an incident that would expose them to punishment or contempt, and Article 426 covers insulting someone's honor or dignity without attributing a specific incident. The column reports base penalties of imprisonment for up to two years or a fine of up to AED 20,000 for Article 425, and imprisonment for up to one year or a fine of up to AED 20,000 for Article 426. For aggravated cases, such as a public servant on duty, a family's honor or an unlawful aim, it reports imprisonment for up to two years and/or a fine of AED 20,000 to 50,000.

Treat those figures as reported, not verified against the statute: the official portal text we could download stops before these articles. What we did read in the official text is that Article 84 lists Articles 425, 426 and 427 among the misdemeanors where a stay of execution can apply when the victim is the offender's spouse, ascendant or descendant and waives the case or reconciles. That confirms these are treated as lesser offenses with room for reconciliation.

The Penal Code still matters when the cybercrime law has bigger numbers. A statement made outside any network, such as a printed flyer or a spoken accusation, falls under it alone, and the gap between up to AED 20,000 and AED 250,000 to 500,000 shows why the channel matters: the same sentence on a wall and on a profile sits in two very different brackets.

Truth, opinion and good faith: how narrow the defenses are

The defenses are narrower than in common-law countries, and readers most often get this wrong. There, truth is usually a complete answer. Under the UAE texts and the commentary on them, truth does not reliably end the exposure.

Article 43 as read contains no truth clause. Article 44 says its privacy offense applies even if the information is true and genuine, when published to harm. The Chambers guide says truth or justification is limited and that a true statement published solely to cause harm can still be punished. Commentary on the Penal Code reports one specific defense, where the incident attributed to a public officer is proven true and relates to their duties.

Commentary also reports that good faith is not a complete defense, and the Chambers guide ties the protection of permissible criticism to an Abu Dhabi Court of Cassation judgment (No. 917 of 2023) that we could not read. It reports that court as finding criminal intent where the language used is inherently offensive. The line between criticism and insult is drawn by tone and wording, not by whether the underlying complaint is justified.

The narrowness cuts both ways: an accurate but contemptuous review, or true but humiliating private material, is within reach of the law, so a true but abusive post can still found a valid complaint.

How a criminal complaint is made, step by step

A criminal complaint is the main route, and the official portal describes it. The Public Prosecution has exclusive power to start and conduct criminal proceedings. For some offenses a victim or representative must first file a written or verbal complaint, and the portal says that complaint is not accepted after three months from when the victim learned of the crime and the perpetrator, unless another law provides otherwise. The portal does not list which offenses need a complaint, but the Chambers guide states, in its defamation section, that criminal complaints must generally be filed within three months of the victim's knowledge of the offense.

Filing a complaint about online defamation or insult

Preserve the evidence firstCapture the post, the account name, the page address, the date and time, and any replies before anything is deleted. Article 65 of the cybercrime law gives evidence drawn from electronic devices and systems the same probative force as physical forensic evidence in a criminal case.
Fix the date you learnedWrite down when you first saw the content and when you could identify who posted it. The three-month period runs from knowledge of the crime and the perpetrator, so the date may have to be proved.
Identify the likely provisionsInsult or attribution points to Article 43, private images or data to Article 44, threats to Article 42. Naming the provision helps the authority classify the report.
Choose a reporting channelThe government portal lists the Ministry of Interior eCrimes platform in the MoI UAE app, the Dubai Police eCrime website, the Abu Dhabi Police Aman service, the My Safe Society app of the federal Public Prosecution, any police station, or the 999 number.
Expect an Arabic-language processThe portal says investigations are conducted in Arabic, with interpreters for those who do not speak it.
Follow the fileThe Public Prosecution investigates and, if the accused's involvement is shown, refers the case to the competent court. A settlement can end it at several points (see below).

The portal page on reporting does not say who may use these channels, whether non-residents can, or what documents are needed. Confirm those details with counsel in the UAE.

A complaint opens an investigation that can look at the complainant's own conduct and messages, so if both sides posted, filing can invite a counter-complaint.

The clocks that decide whether you can still act

Several short periods run in this field, and the dates they start from are different. The table lists the ones we could source.

Clock	Starts when	Length	Source
Criminal complaint	Victim learns of the crime and the perpetrator	Three months	u.ae, criminal proceedings
Grievance against a removal writ	The person learns of the writ	Three working days	Cybercrime law, Article 63
Authority's answer to the grievance	Grievance filed	One week, silence counts as rejection	Cybercrime law, Article 63
Appeal to the Federal Court in the capital	Rejection	One week; court decides in seven days, final	Cybercrime law, Article 63
Civil damages claim	Victim learns of the harm	Generally three years for tort claims, as reported	Chambers practice guide

If you are a publisher or account owner, the middle rows matter most: a writ to correct, disable or block content is the one place in the cybercrime law where periods are counted in working days. The civil period comes from a single practice guide, which states it for tort claims generally (from awareness of the harm) rather than for defamation by name, and not from the civil code itself. Treat three years as an outer reference and the three-month criminal window as the one that forces the pace.

A scenario with invented parties shows the pace. A restaurant owner in Dubai finds an accusation posted by an account that appears to be run from abroad. Week one is evidence and a choice of route, weeks two to six are usually when a complaint or settlement approach is made, and month three is the practical edge of the criminal window if the post was first seen on day one.

Civil damages and settlement: what each route ends

Civil compensation is the quieter route. The Chambers guide describes damages as moral and material and says a criminal court's finding that defamation occurred, and who committed it, is conclusive in later civil proceedings. A case reported by Gulf News shows the pattern: after a woman was convicted of insulting and defaming another, the victim sued in the Abu Dhabi Family, Civil and Administrative Cases Court, claimed AED 51,000, and was awarded AED 10,000 under Article 282 of the Civil Transactions Law, with the final criminal judgment treated as conclusive proof of the insults. That is one news-reported judgment, not a tariff, but it shows awards following the criminal finding and falling well below the claim.

Settlement is built into the cybercrime law. Article 68 lets the accused invoke a settlement reached with the victim, for the offenses listed there, which include Articles 43 and 44, before the Public Prosecution or the court at any stage until the judgment is final. Article 66 lets the Attorney General impose supervision, a ban on using networks or devices, or a rehabilitation program where a case lapses by settlement. The Chambers guide reports cassation appeals (Nos. 2024/1001 and 2024/1003) arguing that reconciliation under Article 68 should have ended the case, and says the judgment appears to have disregarded it, so the effect of a settlement in a given file is not mechanical.

Route	What it can deliver	Speed	Risk
Criminal complaint	Investigation, fine or imprisonment, order to remove or block a site on conviction	Set by the prosecution	Counter-complaint; loss of control of the outcome
Negotiated settlement	A retraction, deletion or payment that ends the criminal case	Fastest, if the other side engages	Weak if not documented; effect varies by file
Civil damages claim	Compensation for moral and material harm	Slower, follows or runs beside the criminal case	Award can be far below the claim
Platform or host report	Removal under the service's own rules	Days to weeks, usually	May be refused; creates no legal finding

On conviction, Article 59 allows the court to deprive the convicted person of network use and to close or block the offending site, fully or in part, where technically feasible. That is a remedy a conviction can carry, not a service a victim can request on its own.

If you or the poster are abroad

The cybercrime law was written to reach beyond the border. Article 69 applies it to offenses committed outside the UAE in four cases: where government systems are involved; where the offense was prepared, planned, directed, supervised or financed inside the UAE; where it affects UAE security, interests, or nationals or residents; and where the offender is found in the UAE afterward and not extradited. The third case matters most for reputation disputes: content aimed at a person living in the UAE, or at a business operating there, can fall inside it even if written elsewhere. The Chambers guide describes the same idea as territorial harm.

Jurisdiction on paper is not a result. A criminal case against someone who never enters the UAE depends on whether they can be reached, and we found no source on how enforcement against posters abroad works, so we do not state it. The Chambers guide does say foreign judgments are enforced in the UAE on reciprocity or treaty and not where they conflict with UAE public policy, which includes defamation standards. That is the reverse direction, but it suggests a foreign judgment on speech may not travel into the UAE.

Situation	What the sources support	Open point
Poster abroad, target in the UAE	Article 69 can apply where UAE residents or interests are affected	Whether the case can be enforced against them
Target abroad, poster in the UAE	The poster is within UAE jurisdiction; the offense is judged on its terms	Whether a foreign target can complain from abroad
A visitor or resident who posted from elsewhere	Article 69 applies the law to an offender later found in the UAE	Travel and residence consequences are for counsel to assess

For a resident, a conviction can cost more than the sentence. Article 126 of the Penal Code, as the official text reads, says a foreigner sentenced to a freedom-restricting penalty for a felony is deported, and that for a misdemeanor the court may order deportation instead of, or on top of, the sentence, with an exemption for some spouses and first-degree relatives of citizens. We did not confirm whether a given online defamation offense is classed as a felony or a misdemeanor, and a Mondaq commentary reports visa and employment effects that we did not trace to a provision. Ask counsel before any admission or settlement.

What the law means for platforms, hosts and account owners

The cybercrime law addresses platforms through the people who run sites and accounts, not through a separate platform regime. Article 53 imposes a fine of AED 300,000 to 1,000,000 on anyone using a website or account who stores, publishes or makes available illegal content and does not remove it or block access within the period set in an order, or who refuses an order without an acceptable excuse. Article 1 defines illegal content to include content whose subject is a crime under the law. Read plainly, content that is itself an Article 43 offense falls within that definition, but we could not confirm how the provision is applied to ordinary defamation disputes.

Article 58 makes a legal person jointly liable for fines or compensation when an employee commits a violation on its behalf, and the person who actually manages it can be liable if aware and their failure contributed. The Chambers guide adds that platforms can be liable for failing to remove illegal content once notified or aware, so for a company running a forum or review section with UAE members, a notice or writ turns a neutral host into a party that has to act.

The orders themselves have a limited scope in the text we read. Article 62 lets the competent authorities issue writs to correct, interrupt, disable or block access once they have verified the dissemination of illegal content or false data, but the English text ties them to the crimes listed in Article 71, which is headed crimes against the security of the UAE. Article 66 lets the Attorney General order a website blocked where it carries content of that kind. We do not treat these writs as a general takedown tool for a private dispute. The routes that fit one are a complaint leading to an Article 59 order, or a request to the service under its own rules. How we approach ordinary removal cases is set out on the removal service page.

Search engines are a separate question. The cybercrime law mentions search engines only in its Article 1 definition of an information network broker, none of the operative provisions we read orders de-indexing, and the practice guide does not address delisting. A UAE judgment or order is a document a person can place before a search engine's legal removal process, which decides under its own policy, but the UAE texts do not oblige a foreign search engine to act.

The next step before you file anything

Decide the route before the first message to the other side. Three questions settle most files. Was the content an insult or an accusation of a specific incident, and which channel carried it? Does the three-month window still run, and on what date did you learn? Is the aim a conviction, a removal, a payment or a retraction, since each points to a different row of the route table?

A file in this field is built in parallel: evidence preserved on day one, a lawyer reviewing the provisions, the platform or host notified under its own policy, and the legal route held back until the choice between complaint and settlement is made. At Reputation Partners we leave the legal choice to the client's counsel and handle the search, platform and monitoring work around it.

If this is happening to you now

Save the evidence, write down the date you first saw it, and do not delete your own replies. Then book a private review of what search engines and AI assistants show for your name: start with the audit.

Questions people ask

Is a private WhatsApp message covered by the online defamation provision?

Article 43 speaks of using an information network or technology device, not of a public audience. The Chambers guide reports a Dubai Court of Cassation judgment that treated WhatsApp as an information technology medium and held publicity not to be crucial. That is a secondary report, so a message sent to one person should be treated as capable of founding a complaint.

Does deleting the post end the problem?

Not necessarily. We found no provision that ends liability because a post was deleted, and the offense under Article 43 is the use of the network to insult or attribute. The Chambers guide says mitigation can be considered where statements are withdrawn, which is different from a defense. A prompt, documented retraction is useful mainly when it supports a settlement.

Can a one-star review be a crime?

It can be, depending on wording. Article 43 turns on insulting someone or attributing a quality that exposes them to punishment or contempt, not on the star rating. The Chambers guide reports an Abu Dhabi judgment that separates permissible criticism from inherently offensive language. Accusations of fraud or theft raise the risk. A factual description in measured terms sits at the lower end, though no wording is risk-free.

Will a conviction get the content out of search results?

Not by itself. A conviction can lead to an Article 59 order closing or blocking the offending site where technically feasible, and the judgment can be presented to a search engine through its legal removal process. The decision then follows that search engine's own policy, and the UAE texts we read do not oblige a foreign search engine to act.