محور تنظيمي
قانون حماية البيانات الشخصية الإماراتي — المادة 18
PDPL Article 18 is the UAE's de-facto AI law
There is no comprehensive UAE AI Act. PDPL Article 18 is where most automated-decision exposure actually lives.
Updated May 2026
التعريف
UAE PDPL (Federal Decree-Law 45/2021) governs the processing of personal data in the United Arab Emirates. Article 18 specifically restricts automated decision-making that produces legal or similarly significant effects on data subjects without human review — making it the federal-level statute every UAE AI deployment must clear, even though no "UAE AI Act" exists.
Status
In force
Issuing instrument
Federal Decree-Law 45/2021
Applies to
All entities processing UAE personal data
Relation to free-zone regulation
Federal floor; DIFC Reg 10 + ADGM regulations apply on top.
ملاحظة تحريرية: النسخة العربية الكاملة من هذا المحور قيد المراجعة من قبل مدقق لغوي عربي قبل النشر. حتى ذلك الحين، يمكنك قراءة النسخة الإنجليزية الكاملة:PDPL Article 18 is the UAE's de-facto AI law ↗