When Iranian missile and drone attacks on the United Arab Emirates began earlier this year, cybercrime laws also came into focus as the conflict played out in the sky—and online. Authorities announced arrests linked to misleading videos, AI-generated clips, illegal filming, and the spread of misinformation.
For many residents, the reaction was one of surprise: How could a screenshot, forwarded video, or social media post become a criminal matter? The answer lies in legal frameworks that were already in place.
During ordinary times, many forms of online misconduct can carry penalties under the UAE’s cybercrime laws. But during crises, emergencies, or disasters, the stakes rise considerably. UAE law Article 52 criminalizes using the internet to spread false news, misleading rumors, or content contrary to official announcements, as well as material that could disturb public peace, spread panic, or harm public order.
In normal circumstances, the minimum penalty is one year in prison and a fine of 100,000 UAE dirhams. During epidemics, crises, emergencies, or disasters, those figures double to a minimum of two years and 200,000 UAE dirhams. The recent conflict did not create a new law. It triggered stricter penalties under one that already existed.
Legal consultant Ahmed Elnaggar, managing partner of Elnaggar & Partners, says the rationale for arrests related to online activity is consistent with that framework. “Content shared during emergencies is assessed not only for its accuracy, but also for its potential impact on stability, security, and public perception,” he says. “What might appear as commentary or documentation can, in such contexts, be interpreted as harmful or unlawful communication.”
Authorities ordered the arrest of defendants accused of publishing misleading videos, including AI-generated clips, and circulating material deemed harmful to public order and security. Abu Dhabi Police also announced the arrest of 375 people for illegally photographing designated locations and spreading misinformation online.
From a legal standpoint, Elnaggar says, all content from unverified or unofficial sources during a conflict carries serious risk. “Only content issued by official, approved UAE public authorities should be treated as safe to share,” he says.
Long before the recent conflict, the UAE’s cybercrime framework has always extended beyond hacking, stolen passwords, and online fraud. Under Federal Decree-Law No. 34 of 2021, it also covers privacy violations, false information, misuse of digital platforms, online defamation, and other forms of harmful online conduct.
For residents, tourists, creators, and anyone carrying a smartphone, the practical lesson is simple: Some common online habits can have legal implications.
When a Screenshot Stops Being Harmless
... continue reading