Civil Law and UAE Damages Assessment Rules

1. Introduction

Damages assessment means the legal process by which a court determines the monetary compensation payable to a person who has suffered legally recognised loss.

Under current UAE federal civil law, this subject must now be considered principally under Federal Decree-Law No. 25 of 2025 promulgating the Civil Transactions Law, which came into force on 1 June 2026. The new law replaced the former 1985 Civil Transactions Law. (UAE Legislation)

The current law adopts an important basic principle: compensation is connected to the actual extent of the injured party's loss and lost profit, provided that the lost profit is a natural consequence of the harmful act. Article 255 states this expressly. (UAE Legislation)

In practical terms:

Wrongful act → legally recognised damage → causation → assessment of loss → compensation

The court does not simply award whatever amount the claimant requests. The claimant must establish the relevant damage and its connection with the defendant's conduct.

2. Current UAE Statutory Framework

A. Federal Decree-Law No. 25 of 2025

The new Civil Transactions Law is now the principal federal civil-law framework for damages arising from harmful acts.

For damages assessment, particularly important provisions include Articles 253–258.

Article 253 — Contribution and multiple wrongdoers

Where several persons are responsible for the harm, the court can determine their respective responsibility and may impose equal or joint-and-several liability as provided by the provision.

Importantly, the court may also reduce compensation or refuse compensation where the injured person contributed to causing or aggravating the harm. (UAE Legislation)

Article 254 — Moral harm

The current law expressly recognises moral harm.

It includes infringement of:

freedom;

honour;

reputation;

social standing; and

financial status.

The law therefore recognises that compensation is not confined to purely physical or commercial losses. (UAE Legislation)

Article 255 — Extent of loss and lost profit

Article 255 provides:

compensation is assessed according to the extent of the loss suffered and the lost profit, provided that it is a natural consequence of the harmful act. (UAE Legislation)

This is particularly important for claims involving:

business interruption;

cybersecurity breaches;

defective products;

property damage;

professional negligence;

commercial misconduct; and

wrongful interference with business.

Article 256 — Form of compensation

Compensation is normally assessed in money.

However, depending upon the circumstances and the injured party's request, the court may order:

restoration of the previous position;

performance of a specific act;

payment by instalments;

periodic income; or

security for instalment/periodic payments.

The provision also allows reconsideration where damage subsequently becomes more severe and permits the court to reserve a right to reconsider compensation where the damage cannot initially be assessed definitively. (UAE Legislation)

Article 257 — Contractual exclusion or limitation of liability

The new law provides that a condition excluding or mitigating liability arising from a harmful act is void, while an agreement aggravating liability may be permitted unless the law provides otherwise. (UAE Legislation)

Article 258 — Limitation

A claim for compensation arising from a harmful act generally becomes inadmissible after three years from the injured party's knowledge of the damage and the person responsible.

There is a special rule where the compensation claim arises from a crime and the criminal proceedings remain admissible. (UAE Legislation)

3. Basic Principle of Damages

The fundamental objective of damages is compensation rather than punishment.

The court seeks to compensate the legally recognised injury caused by the defendant.

A simplified formula is:

Compensation = Proven Loss + Recoverable Lost Profit + Applicable Moral Damage − Relevant Reduction

The precise calculation depends on:

the legal cause of action;

causation;

evidence;

foreseeability where applicable;

contribution by the claimant;

mitigation;

contractual provisions;

type of damage; and

applicable special legislation.

4. Actual Loss and Lost Profit

Article 255 of the current Civil Transactions Law expressly refers to:

loss suffered, and

lost profit,

provided that the lost profit is a natural consequence of the harmful act. (UAE Legislation)

Example

A supplier unlawfully destroys a company's specialised machinery.

The company may potentially claim:

repair/replacement costs;

production losses;

documented additional expenses; and

provable lost profit.

But the claimant should establish the financial consequences with evidence.

A mere assertion that:

"We would have earned AED 10 million"

is insufficient without supporting evidence.

5. Causation

Causation is one of the most important parts of damages assessment.

The claimant must connect:

Defendant's conduct → injury → financial consequence

The DIFC courts have expressly treated causation as a central requirement in damages claims. In Haya Spa LLC v Harper Real Estate / Hasan Real Estate [2016] DIFC SCT 150, the court referred to the requirement that the defendant's conduct must be a substantial cause of the claimant's loss. (DIFC Courts)

Example

If a company suffers:

AED 100,000 from a defective machine, and

AED 500,000 from an unrelated market downturn,

the claimant cannot automatically recover the entire AED 600,000 from the manufacturer.

The court must determine which losses were caused by the defendant.

6. Certainty of Loss

A claimant must normally provide a sufficient evidentiary foundation for the claimed loss.

This is particularly important for:

future profits;

projected revenue;

business opportunities;

speculative investments;

expected market growth; and

consequential commercial losses.

DIFC authorities applying the DIFC Law of Damages and Remedies have expressly required loss, including future loss, to be established with a reasonable degree of certainty. Where exact calculation is impossible, the court may assess the amount judicially. (DIFC Courts)

7. Six Important UAE/DIFC Case Laws

Case 1: Graciela Limited v Giacobbe [2014] DIFC CFI 027

Facts

This was an important IT-system attack case.

The claimant's computer system was deliberately attacked. The litigation involved evidence concerning the IT system, the attack and the resulting restoration requirements.

Damages

The claimant sought USD 690,533, comprising:

McAfee restoration and investigation costs — USD 189,750;

network rebuild — USD 20,926;

contractors' fees — USD 62,605; and

indirect costs — USD 417,252.

The court accepted the damages claim under the applicable DIFC damages framework and considered the objective of putting the claimant as nearly as possible in the position it would have occupied without the wrongful conduct. (DIFC Courts)

Principle

The case demonstrates that damages can include reasonable restoration and investigation expenses when they are sufficiently connected with the wrongful conduct.

UAE relevance

It is particularly useful for:

cybersecurity damages;

IT-system destruction;

forensic investigation expenses;

restoration costs; and

indirect commercial losses.

It is a DIFC authority, not a binding interpretation of the current mainland UAE Civil Transactions Law.

8. Case 2: Haya Spa LLC v Harper Real Estate / Hasan Real Estate [2016] DIFC SCT 150

The case concerned losses associated with inaccurate information concerning premises and the delay in opening a business.

The court considered:

causation;

full compensation;

reasonable certainty;

foreseeability;

contributory conduct; and

mitigation.

The DIFC Law of Damages and Remedies provisions discussed by the court provided for full compensation, reasonable certainty of loss, foreseeability and mitigation. (DIFC Courts)

Principle

The case demonstrates that damages assessment requires more than proof that the defendant breached an obligation.

The claimant must demonstrate:

breach + causation + recoverable loss + appropriate amount.

This principle is highly useful when analysing business interruption and commercial damages.

9. Case 3: Ithmar Capital v 8 Investments Inc. and 8 Investment Group FZE [2007] DIFC CFI 008

This case dealt with contractual damages and the appropriate measure of loss.

The DIFC Court discussed:

loss suffered;

gains of which the claimant was deprived;

avoided costs;

reasonable certainty;

foreseeability;

mitigation; and

replacement transactions.

The court explained that the contractual damages provisions were concerned with putting the injured party in the position it would have occupied had the contract been properly performed. (DIFC Courts)

Principle

Damages assessment is not simply:

Contract price − amount received.

Depending upon the circumstances, the court may need to consider:

market value;

replacement transaction;

additional losses;

avoided costs; and

the date relevant to valuation.

10. Case 4: Globemed Gulf Healthcare Solutions LLC v Oman Insurance Company PSC [2017] DIFC CFI 051

This case is particularly useful concerning future loss.

The court considered UAE-law principles concerning compensation for injury and the distinction between:

actual injury; and

merely potential future injury.

The court observed that future injury can be compensable where it is sufficiently established, while a merely potential injury is different. (DIFC Courts)

Principle

A claimant cannot ordinarily convert every possible future disadvantage into an immediately recoverable damages award.

There must be an adequate factual basis demonstrating the future loss.

Practical importance

This is particularly relevant to:

future medical expenses;

future business losses;

future earning capacity;

long-term property damage; and

continuing cybersecurity consequences.

11. Case 5: Salem Dwela v Damac Park Towers Company Limited [2018] DIFC CFI 083

The court discussed the DIFC damages framework and the principle of full compensation.

The applicable framework provided that damages should place the injured party in the position it would have occupied if the wrong had not occurred. It also considered certainty, foreseeability and mitigation. (DIFC Courts)

Principle

The objective is compensatory restoration.

Therefore, a claimant should not normally receive:

less than the legally recoverable loss; or

a duplicated recovery for the same loss.

Example

If an insurer has already paid AED 500,000 for a particular loss, the claimant cannot ordinarily recover the same AED 500,000 again merely by presenting a second damages theory.

12. Case 6: Luciane v The Luterluter Fitness Club Ltd [2020] DIFC SCT 059

The court considered contractual damages and the requirement that claimed losses be established with reasonable certainty.

The court noted that damages may include:

loss in value of performance;

incidental loss;

consequential loss;

subject to the relevant limitations.

The claimant's asserted revenue loss was not supported sufficiently by evidence, and the claim was therefore rejected. (DIFC Courts)

Principle

A damages claim must be proved, not merely asserted.

This is particularly important for:

lost profits;

anticipated revenue;

business opportunities;

investment returns; and

consequential losses.

13. Case 7: Faizal Babu Moorkath v Expresso Telecom Group Ltd [2023] DIFC CFI 008

This case is important for the concept of actionable loss.

The court explained that a civil claim based on negligence requires legally recognisable loss or damage. Without actionable loss, the analysis of causation and breach cannot produce a damages award. (DIFC Courts)

Principle

A wrongful act alone does not necessarily establish a monetary damages claim.

The claimant must show that the conduct resulted in legally recognised damage.

14. Case 8: Abdel Mohsen Bader Al Khorafi v Bank Sarasin-Alpen (ME) Ltd [2009] DIFC CFI 026

The court considered the relationship between compensation and direct loss.

The reasoning emphasised the need to establish the loss that is directly connected with the relevant conduct rather than treating every subsequent financial consequence as automatically recoverable. (DIFC Courts)

Principle

The claimant must identify the specific loss caused by the relevant wrongful conduct.

This is particularly useful in:

financial-services disputes;

fraud;

investment losses;

banking claims; and

complex commercial litigation.

15. Case 9: Mr Shiraz Mahmood v Standard Chartered Bank DIFC [2021] DIFC CFI 044

This case also illustrates the importance of the statutory structure governing damages.

The court discussed Article 40(2) of the DIFC Law of Damages and Remedies, which permits, in specified circumstances, damages of up to three times actual damages where conduct producing actual damages was deliberate and particularly egregious or offensive. The court did not need to resolve the interaction between that provision and another statutory damages cap in the particular case. (DIFC Courts)

Importance

This illustrates an important distinction:

ordinary compensatory damages and special statutory forms of enhanced damages are not necessarily the same thing.

For mainland UAE litigation, the applicable current federal legislation must be examined rather than automatically importing a DIFC statutory remedy.

16. Types of Damages Under UAE Civil Law

A. Material or Pecuniary Damage

This includes measurable financial loss such as:

repair costs;

replacement costs;

medical expenses;

property damage;

business interruption;

lost income;

additional expenditure;

restoration costs; and

proven lost profits.

B. Moral Damage

The current Civil Transactions Law expressly recognises moral harm.

Article 254 includes harm to:

freedom;

honour;

reputation;

social standing; and

financial status. (UAE Legislation)

This can be particularly relevant in cases involving:

defamation;

privacy violations;

unlawful disclosure;

reputational damage;

wrongful publication; and

certain cybersecurity/data incidents.

17. Direct and Consequential Loss

A court may need to distinguish between:

Direct loss

Loss immediately flowing from the wrongful act.

Example:

AED 200,000 required to repair property damaged by the defendant.

Consequential loss

Additional loss arising as a consequence of the initial damage.

Example:

The damaged property causes a business to close temporarily, generating additional documented losses.

The second category requires careful proof of causation and legal recoverability.

18. Lost Profit

Lost profit is potentially recoverable under Article 255 where it is a natural consequence of the harmful act. (UAE Legislation)

Evidence can include:

audited accounts;

tax records;

sales records;

purchase orders;

contracts;

historical revenue;

comparable periods;

cancelled orders;

expert accounting reports; and

market data.

Example

A cyberattack shuts down an online business for five days.

The claimant produces:

historical daily revenue;

confirmed orders;

cancellation records;

payment records; and

an independent financial calculation.

This provides a stronger basis for assessment than an unsupported projection.

19. Future Loss

Future loss is more difficult.

The court may need to determine:

whether the future damage is sufficiently established;

whether it is causally connected;

how long it is likely to continue;

whether it can be quantified; and

whether later events may change the amount.

The Globemed litigation is useful in understanding the distinction between a sufficiently established future injury and a merely potential future injury. (DIFC Courts)

20. Contribution by the Injured Party

Article 253 of the current Civil Transactions Law is important.

Where the injured person contributed to:

causing the harm; or

aggravating the harm,

the court may reduce the compensation or, depending upon the circumstances, refuse compensation. (UAE Legislation)

Cybersecurity example

A company discovers a serious security breach but deliberately leaves compromised credentials active for several months despite receiving a credible warning.

If additional damage results from that conduct, the defendant may argue that the claimant contributed to the increased loss.

The court would have to examine the facts and the causal contribution.

21. Mitigation of Loss

The claimant should generally take reasonable measures to prevent unnecessary escalation of damage.

For example, after a cybersecurity attack, reasonable mitigation may include:

disconnecting compromised systems;

changing credentials;

engaging forensic specialists;

restoring backups;

notifying relevant parties where legally required;

preventing further unauthorised access; and

securing affected infrastructure.

The DIFC authorities expressly recognise mitigation as an important limitation on damages. (DIFC Courts)

22. Restoration Instead of Money

Article 256 of the current Civil Transactions Law gives the court flexibility.

Depending upon the circumstances and the injured person's request, compensation can involve:

restoration of the previous position;

performance of a specific act;

instalment payments;

periodic income; or

security for future payments. (UAE Legislation)

This is important because damages are not necessarily limited to a single immediate lump-sum payment.

23. Reassessment of Damages

Article 256 is particularly significant where the injury is continuing or cannot initially be calculated with certainty.

The court can:

reconsider compensation if damage becomes more severe; or

reserve the injured party's right to seek reconsideration within a period specified by the court where the amount cannot initially be assessed definitively. (UAE Legislation)

This can be relevant to:

permanent injuries;

continuing property damage;

long-term financial consequences;

continuing technological damage; and

other injuries whose ultimate extent is initially uncertain.

24. Multiple Defendants

Where several people contribute to the same harm, the court must determine their respective responsibility under the applicable law.

Article 253 permits the court, in the circumstances specified by the provision, to determine proportionate, equal or joint-and-several liability. (UAE Legislation)

Example

A cybersecurity breach results from:

negligent security by a service provider;

unlawful conduct by an employee; and

unauthorised access by a third party.

The allocation of responsibility will depend on the contractual and factual relationships and the applicable law.

25. Double Recovery

A claimant should not obtain compensation twice for the same loss.

For example:

Property loss = AED 1 million.

If AED 700,000 has already been recovered from one responsible party for that same loss, a subsequent claim concerning the same damage will generally need to account for the amount already recovered.

The objective remains compensation for the legally established loss, not duplication of recovery.

26. Damages Assessment in Cybersecurity Cases

For a UAE cybersecurity claim, the following categories may be examined:

The Graciela decision provides a particularly useful example of how IT restoration and investigation expenses can form part of a damages calculation where the evidence establishes their connection with the wrongful attack. (DIFC Courts)

27. Evidence Required for Damages Assessment

A claimant should ideally preserve:

Financial evidence

invoices;

bank statements;

accounting records;

tax records;

audited financial statements.

Technical evidence

server logs;

forensic images;

access logs;

system reports;

cybersecurity reports.

Commercial evidence

contracts;

purchase orders;

customer correspondence;

cancelled orders;

sales records.

Expert evidence

forensic IT reports;

accounting reports;

valuation reports;

medical reports where applicable.

Documentary evidence

emails;

WhatsApp communications;

electronic records;

digital signatures;

incident reports.

28. Difference Between Damages and Compensation

The terms are often used interchangeably, but analytically:

Damage = the injury or loss suffered.

Damages/compensation = the legal monetary or other remedy awarded for that damage.

For example:

A cyberattack destroys a company's database.

The database destruction is the damage.

The AED amount awarded for restoration and resulting loss is the compensation/damages.

29. Mainland UAE vs DIFC

This distinction is essential because a DIFC damages provision should not automatically be presented as a provision of mainland UAE federal law.

30. Practical Damages Assessment Formula

For research and examination purposes, the process can be remembered as:

STEP 1 — Identify the legal wrong

Contract?
Harmful act?
Negligence?
Fraud?
Data misuse?
Property interference?

STEP 2 — Identify the damage

What exactly was lost?

STEP 3 — Establish causation

Did the defendant's conduct cause the loss?

STEP 4 — Quantify the loss

How much was actually lost?

STEP 5 — Examine lost profit

Was the profit sufficiently established and was it a natural consequence?

STEP 6 — Examine claimant contribution

Did the claimant contribute to or aggravate the loss?

STEP 7 — Examine mitigation

Could reasonable measures have reduced the loss?

STEP 8 — Avoid double recovery

Has compensation already been obtained for the same loss?

STEP 9 — Determine appropriate remedy

Money?
Restoration?
Specific performance?
Periodic payment?
Other legally available relief?

31. Key Case-Law Principles at a Glance

32. Important Examination Points

For an exam or legal research answer, the most important principles are:

Compensation is linked to legally recognised damage.

The claimant must establish causation.

Actual loss must be properly proved.

Lost profit can be compensable where it satisfies the statutory requirements.

Speculative loss is problematic.

Future loss requires adequate evidentiary foundation.

The injured party's own contribution may reduce compensation.

Reasonable mitigation is relevant to the amount recoverable.

Moral damage is expressly recognised by the current Civil Transactions Law.

Article 256 allows flexibility in the form and timing of compensation.

The court may reconsider compensation where damage subsequently aggravates, subject to the statutory conditions.

Multiple wrongdoers may share liability under Article 253.

Double recovery should be avoided.

DIFC damages authorities must be distinguished from mainland UAE federal law.

For current mainland UAE claims, the 2025 Civil Transactions Law must be considered rather than relying exclusively on cases decided under the repealed 1985 Civil Code.

Conclusion

The UAE approach to damages assessment is fundamentally concerned with identifying the legally recognised injury, establishing causation, measuring the actual loss and providing appropriate compensation. The current Civil Transactions Law expressly addresses multiple liability, contributory conduct, moral harm, lost profit, the form of compensation, reassessment of aggravated damage and limitation. (UAE Legislation)

The leading DIFC authorities provide useful illustrations of how these principles operate in practice. In particular, Graciela demonstrates compensation for cybersecurity-related restoration and investigation costs; Haya Spa emphasises causation and mitigation; Ithmar Capital addresses measurement and certainty; Globemed deals with future injury; and Luciane demonstrates why unsupported profit claims can fail. (DIFC Courts)

The core formula is:

LEGAL WRONG → DAMAGE → CAUSATION → PROOF → QUANTIFICATION → ADJUSTMENT → COMPENSATION

This framework is particularly important in modern UAE disputes involving cybersecurity breaches, commercial losses, professional negligence, property damage, contractual breaches and other complex civil claims.