UAE Recording Laws: All-Party Consent Rules and Penalties (2026)

Overview of UAE Recording Laws

The United Arab Emirates maintains some of the most restrictive recording laws in the world. Every private conversation in the country is protected by an all-party consent requirement, meaning that no one may record, transmit, or disclose a private exchange without the knowledge and agreement of all participants.

This is not a suggestion or a civil guideline. It is criminal law, backed by mandatory prison sentences and six-figure fines. Three separate federal statutes work together to create an interlocking framework that covers everything from a recorded phone call between friends to corporate surveillance systems and data processing by multinational companies.

The legal framework has also expanded in recent years. In addition to the longstanding Penal Code provisions, the 2021 Cybercrimes Law introduced technology-specific penalties, and the Personal Data Protection Law (PDPL) layered on data processing obligations that took effect in January 2025.

For residents, business owners, and visitors alike, the rules are the same: get consent first, or face serious consequences.

Federal Decree-Law No. 34 of 2021 (Article 44): The Cybercrimes Law

The primary statute governing unauthorized recording in the UAE is Federal Decree-Law No. 34 of 2021 on Countering Rumours and Cybercrimes. Article 44 of this law directly addresses privacy violations carried out through electronic means.

What Article 44 Prohibits

Article 44 makes it a criminal offense to use any information network, electronic information system, or information technology to infringe upon the privacy of any person without their consent and outside circumstances permitted by law. The prohibited conduct specifically includes:

• Eavesdropping on conversations or communications
• Recording private conversations, whether by phone or any other medium
• Transmitting or forwarding recorded conversations to third parties
• Disclosing or publishing audio or visual material of a private nature

The scope is broad. "Information technology means" covers smartphones, laptops, VoIP platforms, messaging applications, and any other digital tool capable of capturing audio or video.

Penalties Under Article 44

Violations carry a mandatory minimum of six months imprisonment and a fine of no less than AED 150,000 (approximately USD 40,800). The maximum fine reaches AED 500,000 (approximately USD 136,000). Courts may impose both the imprisonment and the fine, or either one alone.

These are not theoretical penalties. UAE courts regularly prosecute privacy violations, and the country's law enforcement agencies treat unauthorized recording as a serious criminal matter rather than a civil dispute.

How It Applies to Digital Platforms

Article 44 explicitly covers recordings made through any information network. That means the law applies equally to:

• Standard phone calls on mobile or landline
• Voice calls over internet platforms (Zoom, Microsoft Teams, Google Meet)
• Voice messages sent through messaging apps
• Video recordings of private interactions captured on any device

The law draws no distinction between recording a conversation you participate in versus recording someone else's conversation. Both are prohibited without consent.

Crimes and Penalties Law: Articles 431 and 433

Beyond the Cybercrimes Law, the UAE's general criminal code provides additional penalties for recording violations. Federal Decree-Law No. 31 of 2021, the Crimes and Penalties Law, contains provisions that predate the Cybercrimes Law and remain fully enforceable.

Article 431: Privacy and Family Life

Article 431 creates a standalone criminal offense for anyone who interferes with an individual's right to privacy and family life through any of the following acts:

• Eavesdropping on, recording, or transmitting conversations conducted privately, by phone, or through any other device
• Taking or transmitting photographs or video of a person in a private setting without their consent or legal authorization

The penalties under Article 431 include imprisonment and a fine. Courts also have the authority to order confiscation of the devices used in the offense and the deletion of any recordings obtained illegally.

Article 433: Communication Privacy

Article 433 addresses a related but distinct offense: the unauthorized opening of letters, telegrams, or other private communications, and eavesdropping on telephone calls. This provision reinforces the principle that all forms of private communication, whether written, spoken, or electronic, are protected from unauthorized interception.

Penalties under Article 433 include fines and potential imprisonment.

Overlap Between the Statutes

A single act of unauthorized recording can trigger prosecution under both the Cybercrimes Law (Article 44) and the Crimes and Penalties Law (Article 431). Prosecutors have discretion to charge under one or both statutes depending on the circumstances. In practice, Article 44 tends to be the primary charge for technology-based recording, while Article 431 applies more broadly to any recording method, including physical surveillance devices.

The Personal Data Protection Law (PDPL)

Federal Decree-Law No. 45 of 2021, the Personal Data Protection Law, represents the UAE's first comprehensive federal data privacy statute. While it does not specifically mention "recording," it applies to any processing of personal data, which explicitly includes voice recordings, audio files, and any data that can identify an individual.

Key Requirements for Recording Under the PDPL

The PDPL mandates that personal data processing must have a lawful basis. For most recording scenarios, the only viable basis is consent. The law sets a high bar for what qualifies:

• Freely given: The person cannot be coerced or pressured into agreeing
• Informed: The person must know exactly what is being recorded, by whom, and for what purpose
• Explicit: Consent must be demonstrated through a clear affirmative action, not silence or pre-checked boxes
• Specific: The consent must relate to a specific processing activity, not a blanket authorization
• Revocable: The person retains the right to withdraw consent at any time

Organizations that record calls or meetings must also comply with data subject rights, including the right to access recorded data, request its deletion, and object to its continued processing.

Enforcement and Status

The PDPL is enforced by the UAE Data Office, established under Federal Decree-Law No. 44 of 2021. While the executive regulations clarifying detailed implementation procedures have been under development, the core obligations of the PDPL have been in effect since January 2025.

Businesses that handle personal data, including voice recordings, must comply with the law's requirements regardless of whether the full regulatory apparatus is operational.

Free Zone Considerations

The DIFC (Dubai International Financial Centre) and ADGM (Abu Dhabi Global Market) maintain their own data protection regimes that operate independently of the federal PDPL. Businesses operating in these free zones must comply with local regulations such as the DIFC Data Protection Law No. 5 of 2020 and the ADGM Data Protection Regulations 2021, which include similar consent requirements for recording but may differ in specific procedural obligations.

Phone Calls vs. In-Person Conversations

Phone and VoIP Recordings

The UAE applies identical consent requirements to all telephone and VoIP recordings. Federal law does not distinguish between a traditional phone call and a conversation held over an internet-based platform.

One important practical note: the Telecommunications and Digital Government Regulatory Authority (TDRA) regulates VoIP services in the UAE. Many popular VoIP applications, including WhatsApp calls and FaceTime, are restricted by UAE telecom providers. Businesses must use TDRA-licensed VoIP services for voice communications, and any recording of those communications still requires all-party consent.

In-Person Conversations

Recording a face-to-face conversation without consent is equally illegal. Article 431 of the Crimes and Penalties Law makes no distinction based on the method of recording. Whether someone uses a smartphone, a hidden microphone, or a dedicated recording device, the legal standard is the same: all parties must consent.

This includes conversations in offices, restaurants, homes, and vehicles. There is no exception for conversations that take place in semi-public settings. If the participants have a reasonable expectation of privacy, the recording is protected.

Public Spaces: No Blanket Exception

Unlike many Western jurisdictions, the UAE does not provide a broad exception for recordings made in public spaces. While visible CCTV cameras in commercial areas and public streets are regulated and generally accepted, individuals cannot freely record other people in public without their consent.

Article 44 of the Cybercrimes Law and Article 431 of the Crimes and Penalties Law both apply to recordings made in any setting where a person has not consented. Photographing or filming someone in a public area may still constitute a privacy violation if the recording captures private interactions or is used to infringe on their dignity.

Dubai specifically requires commercial and residential buildings to install security surveillance under local regulations, and appropriate signage must be displayed wherever CCTV is deployed. Outside of Dubai, CCTV use in the broader UAE is less specifically regulated but remains subject to the federal privacy laws.

Workplace Recording and Employee Monitoring

Employer Obligations

UAE law does not contain a standalone workplace monitoring statute. However, the general privacy laws apply fully to the employer-employee relationship. Employers who wish to monitor phone calls, emails, or workplace activities must:

• Establish a clear, written monitoring policy
• Disclose the policy to employees before monitoring begins
• Include monitoring provisions in employment contracts or company handbooks
• Limit monitoring to work-related purposes and company-owned systems
• Avoid monitoring private areas such as restrooms, prayer rooms, and break areas used for personal time

The Ministry of Human Resources and Emiratization (MOHRE) has not issued specific guidelines on employee monitoring, but the federal privacy laws and the PDPL set the boundaries.

CCTV in the Workplace

Employers may install visible CCTV cameras in common work areas, provided that employees are notified and signage is posted. Covert cameras in workplaces are prohibited under the privacy provisions of both the Cybercrimes Law and the Crimes and Penalties Law.

Recorded footage must be handled as personal data under the PDPL, meaning it must be stored securely, retained only as long as necessary, and not used for purposes beyond those disclosed to employees.

Monitoring Company Email and Devices

Employers have broader rights to monitor company-owned email accounts and devices, since these are company property. However, monitoring must be strictly related to work purposes and may not extend to accessing personal or family communications, even if conducted on company equipment.

Amicable Settlement and Criminal Waivers

One distinctive feature of UAE criminal law is the availability of amicable settlement for certain privacy offenses. Under the Criminal Procedures Law (Federal Decree-Law No. 38 of 2022), the prosecution may allow the accused and the victim to settle criminal matters outside of court.

Privacy violations, including unauthorized recording, are among the offenses eligible for amicable settlement. If the victim agrees to drop the complaint, the criminal case can be dismissed at any stage of the proceedings.

This does not eliminate the underlying criminal nature of the act. It simply means that the victim has the option to resolve the matter privately rather than pursuing prosecution. Settlement terms typically include financial compensation and an agreement to delete the recordings.

Businesses should not rely on the possibility of settlement as a risk management strategy. The prosecutor retains discretion over whether to offer settlement, and the victim is under no obligation to agree.

Penalties Summary

Statute	Offense	Imprisonment	Fine
Federal Decree-Law 34/2021, Art. 44	Recording via electronic means without consent	Minimum 6 months	AED 150,000 to AED 500,000
Federal Decree-Law 31/2021, Art. 431	Eavesdropping, recording, or photographing private moments	Imprisonment (term at court discretion)	Fine at court discretion
Federal Decree-Law 31/2021, Art. 433	Opening private communications, eavesdropping on calls	Imprisonment possible	Fine at court discretion
Federal Decree-Law 45/2021 (PDPL)	Unlawful processing of personal data (including recordings)	Varies by provision	Determined by UAE Data Office

Courts may also order the confiscation of recording equipment and the destruction of illegally obtained recordings.

Business Compliance Checklist

Organizations operating in the UAE should implement the following measures to comply with recording laws:

Call Recording

• Deploy an automated consent disclaimer at the beginning of every recorded call
• Require verbal confirmation from the caller before recording begins (silence does not constitute consent)
• Log and securely store consent records with timestamps for audit purposes
• Use only TDRA-licensed telecommunications and VoIP providers

Meeting and Video Recording

• Announce recording at the start of every meeting and obtain affirmative consent from all participants
• For virtual meetings, use platform features that notify participants when recording is active
• Provide an option for participants to leave the meeting if they do not consent to recording

Data Handling

• Classify recorded calls and meetings as personal data under the PDPL
• Establish retention policies that limit how long recordings are kept
• Implement access controls so that recordings are available only to authorized personnel
• Respond to data subject requests for access to or deletion of their recorded data within the timelines required by law

Employee Monitoring

• Draft a monitoring policy that specifies what is monitored, by what means, and for what purpose
• Include the policy in onboarding materials and employment contracts
• Post visible signage in areas covered by CCTV
• Never install covert recording devices in the workplace

Court Admissibility of Recordings

Recordings obtained without the consent of all parties are generally inadmissible as evidence in UAE courts. The legal reasoning is straightforward: evidence gathered through an illegal act cannot be used to support a legal claim.

This has practical consequences for both civil and criminal litigation. A person who records a conversation to gather evidence of wrongdoing may find that the recording is excluded from court proceedings. Worse, they may face criminal charges for making the recording in the first place.

There is limited judicial discretion. In rare cases involving serious criminal matters, a judge may consider the circumstances under which a recording was made. However, this is the exception, not the rule, and no one should record a conversation without consent based on the assumption that a court will later admit it.

Law enforcement agencies may obtain authorization to conduct lawful interception of communications, but this requires a court order and is limited to specific criminal investigations.