UAE Cybercrime and Social Media Law in 2026: Defamation, Privacy and Digital Evidence

A message, post, comment, recording or screenshot can become central evidence in a UAE cybercrime case. The legal risk is not limited to public social-media posts. Private messages, group chats, images, recordings, account access and the onward sharing of digital material can also raise criminal, privacy and evidentiary issues.

Quick answer: what law governs cybercrime and social-media offences in the UAE?

The principal federal framework is Federal Decree-Law No. 34 of 2021 on Countering Rumors and Cybercrimes. Depending on the conduct alleged, other legislation may also apply, including the UAE Crimes and Penalties Law, Criminal Procedures Law and the rules governing electronic evidence.

Online defamation and insult

Article 43 of Federal Decree-Law No. 34 of 2021 criminalises using an information network, information technology means or information system to insult another person or attribute to that person a quality that could expose them to punishment or contempt by others.

In practice, the legal analysis should examine the exact words or media used, the account from which they were sent, the intended recipient or audience, authorship, context, technical evidence and any dispute about authenticity.

Privacy can be engaged even without a defamatory statement

Article 44 addresses invasion of privacy and the revealing of secrets through information technology in circumstances outside those authorised by law. Cybercrime risk can therefore arise from the way information, images, recordings or private material are obtained, retained, altered, transmitted or published—not only from whether the words are insulting.

Threats and cyberextortion

Article 42 addresses cyberextortion and cyber threats. Allegations involving demands for money, action or silence in exchange for not publishing information should be treated urgently. The full message sequence matters because a single screenshot may not show what was requested, what preceded it or whether a threat was conditional.

Are WhatsApp messages and screenshots evidence in UAE cases?

Electronic evidence is recognised by Federal Decree-Law No. 35 of 2022 Promulgating the Law of Evidence in Civil and Commercial Transactions. Article 53 defines electronic evidence broadly as evidence derived from data or information generated, stored, extracted, copied, transmitted, reported or received through information technology and capable of being retrieved in an understandable form.

However, the existence of a screenshot does not automatically resolve every evidentiary issue. The parties may still dispute authorship, completeness, alteration, account ownership, context or technical authenticity. Preserving the original device and the complete communication chain can be more valuable than relying only on cropped images.

How should digital evidence be preserved?

• Keep the original phone, computer or storage device where possible.
• Preserve the complete conversation, not only selected screenshots.
• Record usernames, profile identifiers, dates, times and relevant links.
• Avoid editing, annotating or re-saving the only copy of the evidence.
• Preserve emails in their original form with headers where relevant.
• Keep platform notifications, login records and account-recovery communications.
• Document when and how the evidence was obtained.

What if the account was hacked or impersonated?

Authorship is a central issue. If the accused says the account was hacked, cloned, shared or operated by another person, the case may require technical examination of devices, account access records, login data, IP information, linked phone numbers, recovery emails or other digital traces. A profile name or visible photograph alone may not establish who actually created a disputed post.

Deleting a post does not necessarily end the issue

Digital content may have been copied, forwarded, archived, captured by another user or obtained through platform or device records. Deleting content can also create evidentiary questions. Anyone facing a complaint should obtain legal advice before altering devices, accounts or records relevant to the allegation.

Private chats are not automatically risk-free

Whether content was public, sent to one person or shared in a closed group can affect the factual and legal assessment, but private communication is not necessarily outside the cybercrime framework. The statutory provision, intent, recipient, content and means of transmission should be analysed together.

What should a complainant prepare?

A complainant should preserve the original evidence, identify the account or number involved, retain the complete sequence of communications and explain the context without exaggeration. Where authorship is disputed, technical evidence may be critical. Translation may also be necessary where communications are not in Arabic.

What should an accused person review immediately?

The defence should identify the exact allegation, the statutory provision relied upon, the attributed account, the original evidence and how authorship is said to be established. It should also examine whether the material is complete, whether the account was accessible to others, whether the content has been altered, and whether the prosecution evidence technically links the accused to the alleged act.

Frequently asked questions

Can a social-media comment amount to a criminal offence in the UAE?

Potentially, yes. The legal assessment depends on the words used, context, publication method, person targeted, intent and the specific statutory provision.

Is forwarding someone else’s post legally safe?

Not necessarily. Re-sharing or transmitting content can create separate legal risk depending on the material and the applicable offence. The original author and the person who republishes content may face different factual questions.

Can a screenshot alone prove who sent a message?

Not always. A screenshot may be relevant evidence, but authorship and authenticity can still be disputed. Device records, account information and the complete digital chain may be important.

Can recording or publishing a private conversation create liability?

Potentially. Privacy and secrecy provisions can apply depending on how material was obtained, recorded, used or shared and whether the law authorised the conduct.

Should I delete a disputed post after receiving a complaint?

Do not destroy or alter potentially relevant evidence without legal advice. Preservation of the original material may be important to both prosecution and defence.

Related MBH legal services

See MBH’s criminal defense practice and civil litigation and dispute resolution resources for related representation and evidence issues.

How MBH Advocates can assist

MBH Advocates & Legal Consultants advises complainants, accused persons, businesses and individuals in cybercrime and social-media matters across the UAE. Our work includes police and Public Prosecution investigations, defence strategy, digital-evidence review, criminal complaints, court representation and related civil claims where applicable.

Official legal sources: Federal Decree-Law No. 34 of 2021 on Countering Rumors and Cybercrimes and Federal Decree-Law No. 35 of 2022 Promulgating the Law of Evidence in Civil and Commercial Transactions.

This article is general information and not legal advice. Cybercrime matters depend on the exact content, device and account evidence, intent, applicable offence, jurisdiction and procedural stage.