UAE Data Office · AI Office

The onshore UAE federal layer. Unlike the free zones, UAE federal AI governance is mostly soft law: the only binding horizontal hook is the PDPL (Federal Decree-Law 45/2021, a data-protection law), which binds where AI processes personal data — its AI-relevant teeth are automated individual decisions (Art. 18), DPIAs (Art. 21), security (Art. 20) and cross-border transfers (Arts 22–23). The AI Charter and National Strategy 2031 ride along as non-binding guidance. The financial free zones DIFC and ADGM are carved out of the federal PDPL and have their own regimes. PDPL obligations are verified against the primary text (Arabic authoritative); enforcement mechanics were still maturing as of 2026.