Navigating the Digital Frontline The Legal Implications of Online Activity and Information Sharing During Crises in the United Arab Emirates

When missile and drone attacks targeted the United Arab Emirates earlier this year, the conflict was not confined to the physical skies over Abu Dhabi and Dubai. A parallel struggle emerged across digital platforms, as the rapid dissemination of information—and misinformation—triggered a rigorous application of the nation’s comprehensive cybercrime framework. In the wake of these security incidents, the UAE authorities announced a series of arrests involving individuals accused of sharing misleading videos, AI-generated content, and unauthorized footage of defense operations. These legal actions have brought renewed attention to Federal Decree-Law No. 34 of 2021 on Combatting Rumors and Cybercrimes, a piece of legislation that carries significantly heightened penalties during times of crisis, emergency, or disaster.

For many residents and visitors, the swift legal response served as a stark reminder that digital behavior is subject to stringent oversight, particularly when national security is at stake. The transition from a private WhatsApp message or a social media post to a criminal proceeding often hinges on legal definitions that prioritize public order and the prevention of panic. As the UAE continues to position itself as a global hub for technology and tourism, the enforcement of these laws reflects a strategic effort to maintain stability in a volatile regional landscape.

Chronology of Security Events and Legal Responses

The recent focus on cybercrime laws followed a series of unprecedented security challenges in early 2022. On January 17, a drone and missile attack targeted a fuel depot of the Abu Dhabi National Oil Company (ADNOC) and a construction site at Abu Dhabi International Airport. The incident resulted in three fatalities and several injuries, marking a significant escalation in regional tensions. Within hours, videos of the explosions and the subsequent emergency response began circulating on social media, often accompanied by unverified claims regarding the extent of the damage.

On January 24, a second attempted attack was intercepted by UAE air defenses. During this event, social media platforms were flooded with footage of interceptor missiles lighting up the night sky. While some users shared these videos out of curiosity, others used them to spread rumors about potential targets and casualties. The UAE Public Prosecution responded immediately, issuing warnings that filming military installations or the interception of projectiles was strictly prohibited.

By late January and early February, the UAE Attorney General ordered the arrest of several individuals. These defendants were accused of publishing misleading videos, including clips that utilized artificial intelligence to simulate attacks, and circulating material deemed harmful to public order. Abu Dhabi Police subsequently confirmed the arrest of 375 people for various infractions, including the illegal photography of designated sensitive locations and the online dissemination of misinformation. This sequence of events demonstrated that the UAE’s legal apparatus was prepared to pivot from routine enforcement to crisis-mode application of the law.

The Legal Framework: Federal Decree-Law No. 34 of 2021

The cornerstone of the UAE’s digital regulation is Federal Decree-Law No. 34 of 2021, which replaced earlier cybercrime legislation to address the complexities of the modern digital era. While the law covers a broad spectrum of activities—including hacking, identity theft, and financial fraud—it is Article 52 that becomes particularly prominent during security incidents.

Article 52 specifically criminalizes the use of information technology to spread, publish, or republish false news, misleading rumors, or content that contradicts official announcements. The law also targets any material that has the potential to disturb public peace, spread panic among the population, or harm public order.

Under normal circumstances, a violation of Article 52 carries a minimum penalty of one year in prison and a fine of at least 100,000 UAE dirhams (approximately $27,200). However, the law includes an escalation clause for periods of "epidemics, crises, emergencies, or disasters." During such times, the minimum prison sentence increases to two years, and the minimum fine doubles to 200,000 UAE dirhams. The recent missile attacks were classified as a crisis period, triggering these harsher sentencing guidelines.

The Role of AI and Deepfakes in Misinformation

A notable aspect of the recent arrests was the inclusion of defendants who shared AI-generated content. As generative AI technology becomes more accessible, the ability to create realistic but entirely fabricated videos has grown. During the security incidents, several "deepfake" or digitally altered clips appeared to show explosions in areas that had not been targeted.

Legal consultant Ahmed Elnaggar, managing partner of Elnaggar & Partners, emphasizes that the law does not require a malicious intent to cause a disaster; the act of sharing content that could cause panic is sufficient for prosecution. "Content shared during emergencies is assessed not only for its accuracy but also for its potential impact on stability, security, and public perception," Elnaggar explains. The use of AI to create misleading narratives is viewed by authorities as a sophisticated threat to national security, as it can be used to manipulate public sentiment and undermine trust in official communications.

Privacy and the Legal Risk of Screenshots

One of the most common misconceptions among social media users is that private communications—such as those in WhatsApp groups or direct messages—are exempt from cybercrime regulations. However, UAE law provides robust protections for privacy that, if violated, can lead to criminal charges.

The act of taking a screenshot of a private conversation and sharing it without the consent of all involved parties is a violation of the law. Elnaggar points out that the law assumes responsibility at the point of disclosure. "The law does not distinguish between formal publication and informal sharing when the outcome is the same," he says. If a screenshot exposes private information, distorts context, or causes reputational harm, the person who shared it can be held liable.

In the context of a national crisis, sharing a screenshot of a "tip" or a "rumor" received in a private chat can be categorized as a regulated media act. Once that information moves beyond the original two parties, it enters the realm of public dissemination, making the sender subject to the penalties outlined in Article 52.

The Chain of Dissemination: Forwarding and Republishing

Another critical legal reality is that "forwarding" a message is legally equivalent to "publishing" it. Many users believe that liability rests solely with the original creator of a post or video. UAE law, however, treats the entire chain of dissemination as a series of conscious acts.

"Publishing and republishing are treated in the same way," Elnaggar notes. "Liability is attached to the act of publication itself." This means that an individual who receives a misleading video and forwards it to a family group or a community forum is legally responsible for the content they have shared. In a region where platforms like WhatsApp and Telegram are primary sources of news for many, this "chain of liability" is a significant deterrent against the viral spread of unverified information.

Filming Security Operations and the Penal Code

While the cybercrime law handles the digital aspect of information sharing, the act of capturing the footage in the first place can fall under the UAE Penal Code, which carries even more severe consequences. Filming military movements, air defense interceptions, or security-related activities is strictly prohibited.

During the missile interceptions, many residents filmed the sky from their balconies. Authorities clarified that such actions, even if the footage is never posted online, can be treated as a threat to national security. For foreign nationals, violations of this nature frequently lead to immediate deportation following the completion of any prison sentence. In some cases involving the documentation of sensitive military sites, the charges can escalate to espionage-related offenses, which carry life imprisonment or capital punishment under the most extreme circumstances.

Official Responses and Public Guidance

The UAE government has been proactive in educating the public on these matters. The Public Prosecution regularly releases short animated videos on social media to explain specific articles of the law. Their message is consistent: during a crisis, only information released by official, approved public authorities should be treated as safe to share.

Official entities such as the Ministry of Interior, the Ministry of Defence, and the National Emergency Crisis and Disasters Management Authority (NCEMA) are the designated sources for information during security events. Authorities have urged the public to "verify before you share" and to report suspicious content through official channels like the "e-Crime" portal rather than engaging with it or spreading it further.

Analysis of Broader Implications and National Stability

The strict enforcement of cybercrime laws during crises is rooted in the UAE’s broader strategy for national stability. As a country with a high expatriate population—upwards of 80%—and an economy heavily dependent on international investment, tourism, and logistics, the UAE views public perception as a vital national interest.

Misinformation during a security event can have immediate economic consequences, affecting stock markets, travel bookings, and the general sense of safety that the UAE has worked for decades to establish. By doubling penalties during emergencies, the government creates a powerful incentive for digital caution.

Furthermore, the legal focus on AI and digital manipulation suggests that the UAE is preparing for a future where "information warfare" is a constant threat. The ability of the state to control the narrative during a crisis is seen as essential to preventing the kind of social unrest that has affected other parts of the region.

Conclusion for Residents and Visitors

The practical lesson for anyone carrying a smartphone in the UAE is that digital habits common in other jurisdictions—such as filming interesting events or sharing unverified news in group chats—can have life-altering legal implications. The UAE’s legal framework is designed to prioritize the collective security of the state over individual digital expression during times of unrest.

As legal expert Ahmed Elnaggar concludes, the safest course of action is total reliance on official channels. "During a conflict, the safest phone is one you don’t point at the sky," he advises. For the millions of digital users in the UAE, the message is clear: in the eyes of the law, a click, a share, or a screenshot is never a neutral act when the stability of the nation is at stake.