UAE Charter for AI: Ethical Principles vs Binding Law — What’s the Difference
Last updated: 2 November 2026
Key takeaways:
- The UAE Charter for the Development and Use of Artificial Intelligence, approved by the Cabinet on 10 June 2024, sets out twelve principles but assigns no obligations, provides no sanctions and gives no regulator the power to enforce it.
- Other UAE AI ethics guidelines, including the Smart Dubai guidelines of 2019 and the federal guidelines of December 2022, also describe themselves as non-binding.
- Soft law can still acquire teeth: in October 2025, Dubai Finance has called on Dubai government entities to contract only with suppliers holding the Dubai AI Seal for AI-based services.
- The rules that do bind AI are in the PDPL, the cybercrime law, the Child Digital Safety law and, in the financial free zones, DIFC Regulation 10 and the ADGM Data Protection Regulations 2021.
- Write that your company is “aligned with the principles” of the Charter, not “compliant with” it.
We often see client AI policies that say the company acts “in compliance with the UAE AI Charter”, as if it were a statute. Other clients have never opened the Charter and assume it does not concern them. Both approaches are mistaken. The Charter is not law, but it is not irrelevant either, and the line between the two matters for how you draft your documents and where you spend your compliance budget.
What the Charter is
The UAE Charter for the Development and Use of Artificial Intelligence was approved by the UAE Cabinet on 10 June 2024. According to the government portal, it aims to achieve the strategic goals of the UAE Strategy for Artificial Intelligence. It sets out twelve principles: strengthening human-machine ties, safety, algorithmic bias, data privacy, transparency, human oversight, governance and accountability, technological excellence, human commitment, peaceful coexistence with AI, promoting AI awareness for an inclusive future, and commitment to treaties and applicable laws.
Look at the language, though. The Charter lists its target audiences, from the public sector to private companies and developers, but assigns them no obligations, provides no sanctions and gives no regulator the power to enforce it. Its language is aspirational: the UAE “aims”, “encourages” and “emphasizes”. The twelfth principle is telling: it stresses the importance of complying with international treaties and local laws. In other words, the Charter points back to existing law rather than creating new rules.
The Charter is not the only soft law
The UAE has built a whole layer of AI guidance that is expressly voluntary:
- the Smart Dubai AI Ethics Principles and Guidelines of 2019, with a self-assessment tool, which state that the guidelines are non-binding;
- the federal AI Ethics Principles and Guidelines of December 2022, which also describe themselves as non-binding;
- the Dubai AI Seal, a free verification seal from the Dubai Centre for AI for AI businesses licensed in Dubai, which companies may choose to apply for.
Soft law can still acquire teeth. In October 2025, Dubai Finance called on Dubai government entities to contract only with suppliers holding the Dubai AI Seal for AI-based services and consultancies. No law made the Seal mandatory, but for a company that sells AI services to the Dubai government, the practical effect is close to it. A similar grey zone exists in finance: the 2021 guidelines of the Central Bank and the other financial regulators on enabling technologies, including AI, set out principles and best practices, but they were issued under each regulator’s own law, and supervisors can be expected to refer to them.
Where the binding law actually is
The rules that do bind AI in the UAE are not called “AI law”, which is why they are easy to miss:
- Personal Data Protection Law (PDPL). A person may object to decisions resulting from automated processing, including profiling, unless the processing is agreed in a contract, required by law or based on prior consent. A controller using modern technologies that pose a high risk to privacy must assess the impact before processing starts. Administrative penalties still depend on a Cabinet decision.
- Cybercrime law. Modifying a photo or record to defame someone, spreading false news, and creating or modifying an “e-robot” to spread false data are criminal offences, the last punishable by up to two years in prison and/or a fine of AED 100,000 to 1,000,000. These provisions already reach deepfakes and AI bots.
- Child Digital Safety law. It sets rules for digital platforms that operate in the UAE or target users there, including restrictions on the personal data of children under 13.
- Financial free zones. DIFC Regulation 10 and the ADGM Data Protection Regulations 2021 contain the most detailed binding rules on AI and personal data in the country.
Charter principles and their binding counterparts
Comparing the Charter with these laws shows where an ethical principle is already backed by a legal obligation, and where it is not:
Why “non-binding” does not mean “ignore”
First, the Charter shows where the law is heading. The UAE AI Strategy has long envisaged a government law on the safe use of AI, and the new Artificial Intelligence and Data Authority, established in June 2026, is tasked with proposing national legislation. When that legislation comes, the Charter’s principles are the most likely starting point. Second, principles reach companies through contracts: government clients and large corporates increasingly put them into tenders and supplier questionnaires. Third, if something goes wrong under the PDPL or the cybercrime law, a documented and applied ethics framework is good evidence that the company took reasonable care.
How to refer to the Charter in your documents
Do not write that your company is “compliant with the UAE AI Charter”: there is nothing to comply with in a legal sense, and the phrase may suggest you have confused principles with obligations. “Aligned with the principles of the UAE Charter for the Development and Use of AI” is accurate. In your AI policy, keep two separate lists: legal obligations, each with its source, and ethical commitments that the company has chosen to adopt.
What we recommend
- Map your AI uses against the binding rules first: the PDPL, the cybercrime law, sector rules and, in the free zones, DIFC Regulation 10 or the ADGM Regulations.
- Use the Charter as a checklist for the gaps the law does not yet cover, such as bias on the mainland.
- If you sell AI to government entities, check whether they require the Dubai AI Seal or similar evidence.
- Review how your policies and marketing materials refer to the Charter.
The bottom line
The UAE Charter for AI tells you what the country expects from AI. The law tells you what it can punish. Companies need both: the law to stay out of trouble today, and the principles to be ready for the legislation that is likely to follow. AMLzone can help you separate the two in your AI policies and build a framework that meets both.
Sources
1. UAE Cabinet, “Chaired by Mohammed bin Rashid, UAE Cabinet reviews achievements of Emirates Genome Council, approves Ethical Charter of AI, framework for sustainable digital transformation”, 10 June 2024; UAE Legislation portal, “The UAE Charter for the Development and Use of Artificial Intelligence”. https://uaecabinet.ae/en/news/chaired-by-mohammed-bin-rashid-uae-cabinet-reviews-achievements-of-emirates-genome-council-approves-ethical-charter-of-ai-framework-for-sustainable-digital-transformation
2. UAE Government portal, “The UAE Charter for the Development and Use of Artificial Intelligence”. https://u.ae/en/about-the-uae/strategies-initiatives-and-awards/policies/Ai/The-UAE-Charter-for-the-Development-and-Use-of-Artificial-Intelligence
3. The UAE Charter for the Development & Use of Artificial Intelligence, July 2024, principle 12. https://ai.gov.ae/wp-content/uploads/2024/07/UAEAI-Methaq-EN2-3.pdf
4. Smart Dubai, AI Ethics Principles & Guidelines, 2019. https://www.digitaldubai.ae/docs/default-source/ai-principles-resources/ai-ethics.pdf
5. UAE AI Office, AI Ethics: Principles and Guidelines, December 2022. https://ai.gov.ae/publications/
6. Dubai Media Office, “Dubai Finance calls on government entities to contract AI-certified suppliers”, 19 October 2025. https://www.mediaoffice.ae/en/news/2025/october/19-10/dubai-finance-calls-on-government-entities-to-contract-ai-certified-suppliers
7. CBUAE, SCA, DFSA and FSRA, Guidelines for Financial Institutions Adopting Enabling Technologies, 15 November 2021. https://rulebook.centralbank.ae/en/rulebook/introduction-42
8. Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data, Art. 18, 21 and 26. https://uaelegislation.gov.ae/en/legislations/1972/download
9. Federal Decree-Law No. 34 of 2021 on Combatting Rumours and Cybercrimes, Art. 44, 52 and 54. https://uaelegislation.gov.ae/en/legislations/1526/download
10. UAE Legislation portal, “UAE Government issues a Federal Decree-Law on Child Digital Safety”. https://uaelegislation.gov.ae/en/news/uae-government-issues-a-federal-decree-law-on-child-digital-safety
11. UAE Government portal, “UAE Strategy for Artificial Intelligence”. https://u.ae/en/about-the-uae/strategies-initiatives-and-awards/strategies-plans-and-visions/Ai/uae-strategy-for-artificial-intelligence
12. UAE Cabinet, “Mohammed bin Rashid approves establishing Artificial Intelligence and Data Authority”, 14 June 2026. https://uaecabinet.ae/en/news/mohammed-bin-rashid-approves-establishing-artificial-intelligence-and-data-authority
02.11.2026
