Milaaj Editorial / Research Insights

A post goes live on Monday. A WhatsApp broadcast goes out on Tuesday. By Friday, someone tells you there is a permit you were supposed to hold, a consent rule you may have missed and a price claim that needs checking.
Most UAE businesses do not break the rules on purpose. They simply never saw them in one place. This guide maps the main legal considerations for digital marketing in the UAE, from advertiser permits and data consent to messaging rules and consumer law, so you know what to check before your next campaign.
This is a practical overview, not legal advice. Several rules are still developing, so confirm the details with the relevant authority or a qualified adviser before you act.
The main legal considerations for digital marketing in the UAE are: holding a UAE Media Council advertiser permit where required for social media advertising, getting consent before processing personal data or sending marketing messages, following telecom rules for texts and calls, and keeping prices, discounts and claims honest under consumer law. Rules are changing, so check current sources.
The main legal considerations fall into five areas: who may advertise, how you handle personal data, how you contact people, how you describe what you sell, and how you run online sales. Each is covered by different laws and regulators.
Area | What it covers | Main source |
|---|---|---|
Advertising and influencers | Advertiser permits and content standards | UAE Media Council, Federal Media Law |
Personal data | Consent, rights of data owners | Federal Decree-Law 45 of 2021 (PDPL) |
Messages and calls | Consent, opt-out, time limits, Do Not Call | TDRA policies and Cabinet resolutions |
Consumer protection | Prices, discounts, misleading claims, refunds | Federal Decree-Law 15 of 2020 |
E-commerce | Rules for online and social selling | Federal Decree-Law 14 of 2023 |
The sections below take each in turn. Treat the table as a map, then read the source for the area you work in.
In most cases, yes, if you or the people you work with promote products or services on social media. Reporting from Gulf News on the advertiser permit says that from 1 February 2026, individuals advertising on social media must hold a valid Advertiser Permit issued under the Federal Media Law (No. 55 of 2023).
Personal accounts promoting only their own products or services, and certain minors producing educational content, are reported as exempt. Because the exact scope matters, read the Media Council's own guidance before you decide who in your team is covered.
The same report says the permit is free for citizens and residents for the first three years and valid for one year at a time, with visitor permits lasting three months. It lists fines that range from AED 5,000 up to AED 1,000,000 depending on the breach, with separate amounts for operating without a permit. These are single-source figures, so confirm them with the authority.
If you work with creators, make permit checks part of your contract and onboarding. Our influencer marketing team in Dubai checks permits and content standards before a campaign goes live.
The UAE's personal data protection law (PDPL) matters for marketing because almost every campaign uses personal data: emails, phone numbers, website analytics and ad audiences. The government's page on data protection laws says the law applies to processing personal data, in whole or in part, through electronic systems, and bars processing without the data owner's consent, with limited exceptions. It came into force on 2 January 2022. You can read the overview on the UAE government's data protection page.
Commercial advisers reported in mid-2026 that the law's executive regulations had still not been issued, and that a penalty schedule had not been confirmed. That means you will see fines quoted online with no clear source. Do not rely on them.
For the practical steps on a website, including cookies, forms and privacy notices, use our UAE PDPL compliance checklist for websites.
The safest rule is simple: only message people who have agreed to hear from you, tell them how to stop, and keep a record. That sits on top of PDPL's consent principle and the telecom regulator's policies.
According to one messaging vendor's summary of the rules, which you should verify against the regulator's own documents, marketing texts in the UAE need verified and evidenced consent, a free way to opt out, a sender name marked with an "AD-" prefix, and no sending between 9 pm and 7 am.
WhatsApp has its own opt-in rules on top of the law. For structured email programmes with consent built in, our email marketing team in Dubai builds sign-up flows, segments and records that hold up.
Marketing calls have their own limits. The same vendor summary reports that Cabinet Resolution No. 56 of 2024 restricts marketing calls to 9 am to 6 pm and bars contacting numbers on the UAE's Do Not Call Register. It also says the resolution's definition of telemarketing may cover marketing texts, which is why many senders use the narrower window.
That last point is an interpretation, so check it with a lawyer if you run large campaigns. The safe habits are:
Consumer law expects your advertising to be truthful and your prices to be clear. A commercial summary of Federal Decree-Law No. 15 of 2020 lists these expectations for online sellers:
The same summary reports fines for misleading advertising in a range from AED 10,000 to AED 100,000, with higher amounts for repeat violations. Those figures come from a commercial source, so treat them as indicative.
Honest claims also protect your brand. If you plan creator campaigns, our guide to influencer marketing costs in Dubai explains what to budget, including content review.
E-commerce has its own law. Federal Decree-Law No. 14 of 2023 on Trading by Modern Technological Means covers buying and selling goods and services through websites and apps, including social commerce, and is reported to extend to free zones. A legal summary says it covers consumer rights such as transparent advertising and ways to resolve complaints, and sets standards for digital sellers.
For marketers, the practical points are:
If your store sells through social platforms, our social media marketing team in Dubai can align your content with your terms, claims and permits.
Use this checklist before you launch anything:
Keep the checklist with your campaign brief. A two-minute check beats a regulatory letter.
Ask a qualified UAE lawyer for anything that carries real risk, such as large data campaigns, regulated products or cross-border activity. For day-to-day marketing, check the source authority: the UAE Media Council for permits, the telecom regulator for messaging and the Ministry of Economy for consumer matters.
Your marketing partner should also build compliance into the work. If you would like a team that plans campaigns with these rules in mind, our digital marketing company in Dubai can review your channels, consent flows and creative before they go live.
Reporting says individuals who advertise on social media need an Advertiser Permit from 1 February 2026. Personal accounts promoting only their own products or services are reported as exempt, so confirm your situation with the UAE Media Council.
Yes, as a safe rule. The data protection law bars processing personal data without consent, and telecom policies reportedly require verified consent and a free opt-out for marketing texts. Keep a record of each consent.
If you collect or use personal data such as emails, phone numbers or audience data, it is likely to apply. The law has been in force since 2 January 2022, and its executive regulations had not been confirmed as issued by mid-2026.
You should not. Organisations are reported to be responsible for checking that the advertisers they work with hold a valid permit. Add a permit check to your contracts and verify before any content goes live.
Show full prices before checkout, make sure discounts reflect genuine previous prices, and avoid misleading claims about features or availability. Commercial summaries report fines for misleading advertising, so keep evidence for every claim.
The legal considerations for digital marketing in the UAE come down to four habits: get permission before you collect or contact, hold the right permits for promotion, keep prices and claims honest, and write things down. None of them is complicated, but all of them are easy to forget in a busy campaign week.
Use the checklist, verify the rules that matter most to your business and review them regularly, because this area is still changing. If you would like a partner who builds compliance into your campaigns from the start, that is the kind of work Milaaj Brandset does with UAE businesses every week.