Certainly. I’ll give this as a fresh, more legally precise version, with the post-1 June 2026 UAE Civil Transactions Law distinguished from older authorities. I’ll also avoid treating DIFC/ADGM cases as binding on onshore UAE courts; they are used to demonstrate UAE legal fragmentation and comparative judicial approaches. (DIFC Courts)

Civil Law And UAE Fragmentation Of Global Internet Legal Governance

1. Introduction

The expression “fragmentation of global internet legal governance” describes the fact that the internet is technically global, but its legal regulation remains divided among different countries, legal systems, regulators, courts, contractual regimes and specialised jurisdictions.

A single internet transaction can involve:

a UAE user;

a foreign technology company;

servers located in another country;

cloud infrastructure spread across several countries;

a UAE payment provider;

foreign data processors;

a contract governed by foreign law;

a dispute ultimately brought before a UAE court.

Consequently, there may be several potentially relevant legal regimes.

The UAE provides a particularly important example because internet-related activity can be governed simultaneously by:

UAE federal legislation;

emirate-level legislation;

onshore UAE courts;

DIFC legislation and courts;

ADGM legislation and courts;

sector-specific regulatory frameworks;

foreign law;

international arbitration;

private contractual rules of digital platforms.

The result is not one unified “internet law,” but a multi-layered legal order.

2. Meaning of Fragmentation

Fragmentation occurs when different legal authorities regulate different aspects of the same digital activity.

For example, consider a UAE consumer purchasing a service from a foreign platform:

UAE consumer

↓

Foreign platform

↓

Foreign cloud provider

↓

International payment system

↓

Cross-border data processing

A dispute may simultaneously raise:

contract law;

consumer law;

data protection;

electronic transactions;

cybercrime;

tort;

intellectual property;

financial regulation;

jurisdiction;

evidence;

enforcement.

Therefore:

One technological transaction can produce several legally relevant relationships.

3. Why the Internet Creates Legal Fragmentation

Traditional civil law is substantially territorial.

A court generally asks:

Where is the defendant?

Where was the contract made?

Where was it performed?

Where did the damage occur?

Where is the property?

Digital activity complicates these questions.

An online transaction may have no single physical location.

For example:

buyer in Dubai;

seller in London;

server in Ireland;

payment processor in Singapore;

software developer in India;

data centre in the United States.

The internet therefore creates a situation where:

Technological geography and legal geography are not necessarily the same.

4. UAE's Multi-Level Internet Legal Structure

The UAE internet environment can be represented as follows:

Level 1 — Federal UAE Law

Including rules concerning:

civil transactions;

evidence;

procedure;

electronic transactions;

cybercrime;

data protection;

consumer protection.

Level 2 — Local UAE Law

Individual emirates may have additional legislation and regulatory structures.

Level 3 — Special Legal Jurisdictions

DIFC;

ADGM.

Level 4 — Sectoral Regulation

Including:

financial services;

telecommunications;

digital assets;

data;

cybersecurity.

Level 5 — Private Regulation

Including:

website terms;

platform contracts;

privacy policies;

community standards;

technical protocols.

Level 6 — Foreign Law

A digital business may simultaneously be subject to laws of countries where:

it is incorporated;

it operates;

customers are located;

data is processed;

assets are held.

This produces legal pluralism in cyberspace.

5. The New UAE Civil Transactions Law

A significant development is Federal Decree by Law No. 25 of 2025, which replaced the former 1985 Civil Transactions Law with effect from 1 June 2026.

This is important when analysing contemporary internet disputes.

Older UAE judgments frequently refer to provisions of the 1985 Civil Transactions Law. Those authorities can remain useful for historical interpretation and continuity of legal principles, but their former article numbers should not automatically be treated as provisions of the current law.

The new Civil Transactions Law also provides a hierarchy for situations where no specific legislative provision directly resolves a civil-law issue.

This is significant for technological disputes because legislation cannot realistically anticipate every future digital technology.

6. Internet Governance and Civil Law

Internet governance is not confined to cybercrime.

Civil law regulates the consequences of digital conduct through concepts such as:

contract;

consent;

breach;

damage;

causation;

unjust enrichment;

property;

agency;

compensation;

confidentiality;

privacy-related obligations.

For example, hacking may create a criminal offence, but the same conduct may also create:

civil liability for damage to computer systems, property, business operations or confidential information.

Therefore:

Cyber regulation and civil liability frequently overlap.

7. Case Law 1 — Graciela Limited v Giacobbe [2014] DIFC CFI 027

This is an important UAE digital-law authority.

The case concerned interference with the claimant's IT system by a former senior IT employee. The DIFC Court examined extensive evidence concerning the company's computer systems, servers, data storage and remote access.

The Court ultimately awarded damages and interest after finding liability for the interference with the IT system.

Legal significance

The case demonstrates that traditional civil-law principles can be applied to digital infrastructure.

The law does not necessarily need an entirely new category called:

“Internet property.”

Existing concepts relating to:

interference;

damage;

causation;

wrongful conduct;

remedies;

may be adapted to technological circumstances.

Fragmentation significance

The dispute concerned an IT system located partly in the DIFC and partly in other locations around the world.

Thus, even within a single business, digital infrastructure may be geographically distributed while the dispute is litigated in a particular jurisdiction.

8. Case Law 2 — Lural v Listran & Lokhan [2021] DIFC CA 003

The DIFC Court of Appeal considered the interaction between DIFC jurisdiction, an exclusive jurisdiction clause and judgments from another UAE jurisdiction.

The Court examined the DIFC jurisdictional gateways and the effect of a written exclusive jurisdiction agreement.

The case also considered whether a “final judgment” from another court should automatically prevent the DIFC Court from exercising jurisdiction, emphasising the significance of whether that judgment was one the DIFC Courts would recognise.

Importance

This demonstrates that fragmentation can exist inside the UAE itself.

The legal question may not simply be:

“Is this a UAE dispute?”

It may instead be:

“Which UAE judicial system has jurisdiction?”

For digital businesses operating across Dubai mainland and DIFC, this distinction can become critical.

9. Case Law 3 — DFSA v Commissioner of Data Protection & Waterhouse

This DIFC litigation concerned the operation of the DIFC data-protection regime and the relationship between regulatory powers and data-subject rights.

The Court examined the DIFC Data Protection Law and the role of the Commissioner of Data Protection in relation to access to personal data.

Significance

This demonstrates regulatory fragmentation.

A company operating in the UAE cannot always assume that there is one identical data-protection regime applicable throughout every part of the UAE.

The mainland, DIFC and ADGM can involve distinct regulatory frameworks.

Current comparative guidance also recognises that mainland UAE, DIFC and ADGM operate as separate legal jurisdictions for data-protection purposes, meaning transfers between them can raise cross-border-transfer issues despite all being geographically within the UAE.

Civil-law implication

A data dispute may therefore involve:

contractual obligations;

statutory privacy obligations;

regulatory obligations;

civil compensation;

jurisdictional questions.

10. Case Law 4 — Tavira Securities Ltd v Re Point Ventures FZCO & Others [2017] DIFC CFI 026

The DIFC Court considered whether jurisdiction could effectively be created by establishing a DIFC connection after the events giving rise to the dispute.

The Court was concerned with the predictability of jurisdictional rules and the danger of retrospectively creating jurisdiction through later circumstances.

Significance for internet governance

This principle is particularly important for multinational technology companies.

Imagine:

Year 1: foreign technology company operates without a UAE presence.

Year 2: company establishes a DIFC entity.

Year 3: litigation begins concerning conduct from Year 1.

The mere existence of a later DIFC connection should not automatically answer the question of which court had jurisdiction over the earlier conduct.

This is important because digital businesses frequently restructure:

subsidiaries;

branches;

data centres;

cloud arrangements;

intellectual-property ownership.

Legal jurisdiction therefore requires stable connecting factors.

11. Case Law 5 — Atul Ashok Amir Chand Dhawan v Zurich International Life Ltd [2025] DIFC CFI 019

This recent DIFC decision considered whether the DIFC Courts had jurisdiction over the dispute.

The Court examined statutory jurisdictional gateways and connections such as:

establishment in the DIFC;

contractual performance;

events occurring in the DIFC;

express jurisdiction agreements.

The Court ultimately concluded that the DIFC Courts did not have jurisdiction on the facts of the case.

Importance for internet governance

This is particularly relevant to digital transactions because online businesses can have numerous superficial connections with a jurisdiction.

For example:

UAE customers;

UAE website accessibility;

UAE marketing;

foreign incorporation;

foreign servers.

None of these factors should automatically be treated as establishing jurisdiction.

The court must identify the legally relevant jurisdictional gateway.

12. Case Law 6 — Ashok Kumar Goel & Others v Credit Suisse (Switzerland) Ltd [2021] DIFC CA 002

This DIFC Court of Appeal case concerned jurisdiction and the interpretation of a jurisdiction agreement.

The case demonstrates that contractual jurisdiction clauses must be examined according to their wording, context and applicable legal framework.

Importance for digital contracts

Digital platforms frequently use standard-form agreements containing:

governing-law clauses;

jurisdiction clauses;

arbitration provisions;

limitation provisions.

A platform may attempt to state:

“All disputes shall be determined exclusively by the courts of Country X.”

But the effectiveness of such a clause in UAE proceedings depends upon:

the applicable law;

mandatory UAE rules;

the jurisdiction of the relevant court;

the nature of the dispute;

whether the clause is legally effective.

Therefore:

A website's terms of service do not automatically eliminate UAE jurisdiction.

13. Case Law 7 — Dubai Court of Cassation Civil Cassation No. 468 of 2024

This case involved WhatsApp communications concerning a financial transaction.

The decision illustrates the willingness of UAE courts to consider electronic communications as legally significant evidence in determining contractual relationships.

Significance

The case demonstrates another form of internet fragmentation:

Traditional civil-law concepts are increasingly operating through digital communication technologies.

The internet is therefore not merely a separate regulatory environment.

It is becoming the medium through which ordinary civil relationships are created.

Contracts may now arise through:

email;

WhatsApp;

electronic platforms;

electronic signatures;

online acceptance.

Consequently, civil law must interact with technology at the point of contract formation itself.

14. Case Law 8 — Techteryx Ltd v Aria Commodities DMCC & Others [2025] DIFC DEC 001

This litigation involved the DIFC Digital Economy Court and complex commercial issues with international dimensions.

The proceedings demonstrate the emergence of specialised judicial structures for disputes involving the digital economy and technologically complex commercial relationships.

Significance

The development of specialised digital-economy adjudication has two consequences.

Positive consequence

Judges and procedures can develop greater technological expertise.

Fragmentation consequence

A new specialist forum creates another question:

Which court should hear the dispute?

Thus, specialised digital courts can simultaneously:

reduce substantive complexity;

increase jurisdictional complexity.

15. What These Cases Demonstrate

The cases collectively reveal several forms of fragmentation.

16. Data Protection as a Major Example

Data is perhaps the clearest example of fragmented internet governance.

Consider a company with:

mainland UAE employees;

DIFC financial operations;

ADGM investment activities;

customers in Europe;

cloud storage in another country.

The company may have to analyse multiple legal regimes.

Even transfers between mainland UAE and the financial free zones can raise separate legal questions because those jurisdictions have distinct data-protection frameworks.

Therefore:

“UAE data law” cannot always be treated as one completely uniform regulatory category.

17. Cybercrime and Civil Liability

Cybercrime regulation primarily establishes public-law consequences.

Civil law deals with private consequences.

Suppose an attacker:

obtains unauthorised access;

deletes company data;

causes business interruption;

causes financial loss.

The same conduct may produce:

Criminal consequences

Under cybercrime legislation.

Civil consequences

For:

property damage;

financial loss;

contractual loss;

compensation.

Procedural consequences

Concerning:

electronic evidence;

expert evidence;

preservation of data.

Thus:

One cyber event can generate multiple legal proceedings.

18. Cross-Border Cloud Computing

Cloud computing creates a particularly difficult territorial problem.

Suppose:

UAE company

↓

uses

foreign cloud provider

↓

whose data is stored across:

Europe + Asia + United States

If data is corrupted, deleted or disclosed:

Where did the harmful event occur?

Possible answers include:

UAE, because the business suffered loss;

foreign country, because the server was located there;

country of the cloud provider;

place of contract;

several jurisdictions simultaneously.

This demonstrates the inadequacy of purely physical territorial analysis for modern digital activity.

19. Blockchain and Distributed Ledgers

Blockchain makes fragmentation even more complex.

A blockchain transaction may have:

user in UAE;

exchange in another country;

nodes distributed worldwide;

token issuer elsewhere;

wallet provider in another jurisdiction.

There may be no single physical “place” where the transaction occurred.

Civil-law questions include:

ownership;

possession;

contractual obligation;

unjust enrichment;

tracing;

fraud;

restitution;

damages.

The court therefore has to translate a technologically distributed activity into legally relevant connecting factors.

20. Artificial Intelligence

AI creates similar problems.

Suppose:

UAE business deploys foreign AI software;

model is hosted abroad;

developer is foreign;

user is in UAE;

AI makes an erroneous decision;

claimant suffers financial damage.

Potential defendants may include:

software developer;

platform provider;

UAE company;

cloud provider;

data provider.

Potential laws include:

contract;

tort;

data protection;

cybersecurity;

consumer law;

intellectual property.

This is a clear example of fragmented digital civil liability.

21. Internet Contracts

Online contracts are another major source of fragmentation.

A platform may provide:

“Governing law: Country X.”

and:

“Exclusive jurisdiction: Country Y.”

But the user may reside in the UAE.

The court must consider:

whether the clause is incorporated;

whether the user actually accepted it;

whether it is legally valid;

whether mandatory UAE law applies;

whether the chosen court has jurisdiction;

whether the resulting judgment can be enforced in the UAE.

Therefore:

Contractual choice-of-law does not necessarily eliminate all mandatory local law.

22. Platform Rules as Private Governance

Large digital platforms operate their own private regulatory systems.

Examples include:

account suspension;

content moderation;

payment restrictions;

algorithmic ranking;

identity verification;

data-processing policies.

These rules can affect users almost like regulatory decisions.

But they remain fundamentally contractual/private rules unless public law gives them another legal status.

This creates an important distinction:

Public internet governance

Government legislation and regulation.

Private internet governance

Platform contracts and technical rules.

The two systems increasingly overlap.

23. Consumer Protection

Cross-border e-commerce makes fragmentation particularly important for consumers.

A UAE consumer may purchase from a foreign platform without knowing:

where the seller is incorporated;

where data is stored;

which law governs;

where disputes must be brought.

The platform may seek to impose foreign:

governing law;

jurisdiction;

arbitration.

The consumer may simultaneously benefit from mandatory protections under UAE law, depending on the applicable legal framework.

Thus:

Digital consumer protection is a major area where territorial law confronts borderless commerce.

24. Electronic Evidence

Digital disputes also fragment evidentiary questions.

Evidence may include:

WhatsApp messages;

emails;

cloud records;

server logs;

blockchain records;

metadata;

electronic signatures;

AI-generated documents.

The physical location of the evidence may be different from:

the location of the parties;

the location of the transaction;

the place where damage occurred.

The court therefore needs rules for:

authenticity;

reliability;

integrity;

attribution;

preservation.

The Dubai Court of Cassation's treatment of WhatsApp communications illustrates how traditional contractual analysis increasingly interacts with digital evidence.

25. Recognition of Foreign Judgments

Fragmentation becomes particularly significant after judgment.

Imagine:

Foreign Court

↓

foreign judgment

↓

UAE assets

The claimant must then consider:

Can the foreign judgment be recognised and enforced in the UAE?

A judgment that is effective in its country of origin is not automatically equivalent to a UAE judgment.

This makes recognition and enforcement a central component of internet governance.

26. Parallel Proceedings

An online dispute may generate:

UAE litigation;

foreign litigation;

arbitration;

regulatory investigation.

For example:

UAE Court

and

English Court

and

arbitration tribunal

may each become involved in related matters.

The legal system must determine:

jurisdiction;

priority;

stay;

recognition;

res judicata;

anti-suit issues;

enforcement.

The Lural litigation illustrates the complexity that can arise when competing courts and judgments interact within the broader UAE judicial environment.

27. Internal UAE Fragmentation

One of the most important points is that fragmentation is not exclusively international.

The UAE itself contains multiple legal environments.

Onshore UAE

Primarily governed by UAE federal legislation and applicable local law.

DIFC

A specialised financial free-zone jurisdiction with its own legislation and courts.

ADGM

A separate financial free-zone jurisdiction with its own legislation and courts.

Therefore:

“UAE law” is not always a sufficient answer to a digital jurisdiction question.

One must first identify:

Which UAE legal jurisdiction?

28. Why DIFC and ADGM Matter

DIFC and ADGM are particularly relevant to internet governance because they host:

financial technology;

investment businesses;

digital-asset enterprises;

international companies;

technology businesses.

This creates significant interaction between:

digital commerce;

financial regulation;

data;

civil liability;

arbitration;

international dispute resolution.

Specialised courts can provide sophisticated treatment of these disputes, but they also create additional jurisdictional questions.

29. Legal Pluralism

The UAE therefore illustrates a concept known as legal pluralism.

Legal pluralism means that different legal orders operate simultaneously within the same broader geographical environment.

In the UAE digital context, these may include:

federal UAE law;

emirate-level law;

DIFC law;

ADGM law;

foreign law;

international arbitration rules;

private contractual rules.

This is particularly important for global internet businesses.

30. Temporal Fragmentation

Internet law also changes rapidly.

A company may begin a transaction under one legal framework and face litigation after legislation has changed.

The 2026 replacement of the UAE Civil Transactions Law demonstrates why legal systems must maintain historical versions of legislation.

A legal question may therefore require:

What law applied when the digital event occurred?

rather than simply:

What law exists today?

This is particularly important in long-term digital contracts.

31. Fragmentation and Artificial Intelligence

AI systems intensify the problem.

An AI legal system may search:

UAE legislation;

DIFC legislation;

ADGM legislation;

foreign law;

case law.

But if it treats all these materials as one legal database, it may produce an incorrect conclusion.

A proper system must distinguish:

Jurisdiction

↓

Applicable law

↓

Authority level

↓

Date

↓

Binding versus persuasive authority

↓

Current versus repealed legislation

This is essential for reliable legal analysis.

32. Fragmentation and Legal Reasoning

The new UAE Civil Transactions Law is particularly relevant because civil disputes may require legal reasoning where legislation does not provide a direct answer.

A machine therefore cannot simply search for:

“internet law.”

It must determine:

what legal relationship exists;

which jurisdiction governs;

which statutory regime applies;

which conflict-of-laws rule applies;

which evidence is legally relevant;

which remedy is available.

Therefore:

Digital legal governance requires jurisdiction-sensitive legal reasoning, not merely digital legislation.

33. Advantages of Fragmentation

Fragmentation can have legitimate benefits.

1. Regulatory specialisation

Financial centres can develop specialised rules.

2. Local policy protection

States can protect local interests.

3. Innovation

Different jurisdictions can experiment with legal approaches.

4. Specialised courts

Digital-economy disputes can receive technically informed treatment.

5. Consumer protection

Local mandatory rules can protect users.

34. Disadvantages

Fragmentation can also create:

1. Legal uncertainty

Parties may not know which law applies.

2. Higher costs

Multiple legal systems may need to be analysed.

3. Parallel litigation

Several courts may become involved.

4. Conflicting judgments

Different courts may reach inconsistent results.

5. Enforcement difficulties

A judgment may not automatically operate internationally.

6. Compliance duplication

Companies may need to satisfy multiple regulatory systems.

35. A UAE Cross-Border Internet Dispute Model

A useful analytical sequence is:

Step 1 — Identify the parties

Where are they domiciled or incorporated?

Step 2 — Identify the digital activity

What happened online?

Step 3 — Identify connecting factors

Where were:

users;

servers;

assets;

contracts;

performance;

damage?

Step 4 — Identify jurisdiction

Which court has authority?

Step 5 — Identify governing law

Which substantive law applies?

Step 6 — Identify mandatory law

Are local mandatory provisions applicable?

Step 7 — Identify regulatory law

Is a specialised regulator involved?

Step 8 — Identify dispute-resolution clause

Court or arbitration?

Step 9 — Examine parallel proceedings

Are proceedings already pending elsewhere?

Step 10 — Examine enforcement

Where are the assets?

This produces a much more accurate analysis than simply asking:

“Is the dispute online?”

36. Six Major Legal Principles Emerging From the Case Law

Principle 1 — Digital conduct can be governed by traditional civil concepts

Graciela v Giacobbe demonstrates this.

Principle 2 — Jurisdiction is legally structured

Dhawan v Zurich illustrates the importance of jurisdictional gateways.

Principle 3 — UAE itself contains multiple judicial systems

Lural v Listran demonstrates this.

Principle 4 — Data may be governed by specialised regimes

DFSA v Commissioner of Data Protection demonstrates this.

Principle 5 — Contractual jurisdiction clauses matter

Goel v Credit Suisse demonstrates this.

Principle 6 — Digital communications can have ordinary civil-law consequences

Dubai Cassation 468/2024 demonstrates this.

37. Overall Case-Law Table

38. The Central Conflict

The central legal tension can be expressed simply:

Technology is borderless; law remains jurisdictional.

A blockchain does not respect national borders.

A cloud system can operate simultaneously across continents.

A social-media post can reach the entire world.

An AI model can process data from dozens of countries.

But:

courts have territorial jurisdiction;

regulators have statutory jurisdiction;

civil liability requires applicable law;

contracts contain governing-law clauses;

judgments require recognition;

enforcement remains geographically dependent.

Therefore, the internet has not eliminated territorial civil law.

Instead, it has created greater interaction between territorial legal systems.

39. Future UAE Civil-Law Challenges

Future disputes are likely to involve:

AI-generated harm

Who is responsible when an AI system causes economic loss?

Autonomous digital agents

Can a company be responsible for actions performed autonomously by software?

Digital assets

Which jurisdiction governs blockchain-based property?

Cross-border data

Which privacy regime applies when data moves between mainland UAE, DIFC, ADGM and foreign countries?

Platform liability

When does contractual platform governance become legally insufficient?

Cloud liability

Which jurisdiction governs loss caused by a distributed cloud system?

Digital inheritance

Which law governs online assets after death?

These questions demonstrate why internet legal governance is becoming increasingly fragmented.

40. Conclusion

Fragmentation of global internet legal governance in UAE civil law means that digital conduct is governed through multiple overlapping legal systems rather than one universal internet regime.

The UAE demonstrates this particularly clearly because digital activity may simultaneously engage:

federal UAE legislation;

local legislation;

onshore courts;

DIFC law and courts;

ADGM law and courts;

specialised regulators;

foreign law;

arbitration;

private platform contracts.

The case law reinforces this structure.

Graciela Ltd v Giacobbe demonstrates that conventional civil-law concepts can govern interference with IT infrastructure. Lural v Listran demonstrates the complexity of competing jurisdictions and recognition. DFSA v Commissioner of Data Protection illustrates specialised data governance. Tavira Securities and Dhawan v Zurich demonstrate the importance of legally recognised jurisdictional connections. Goel v Credit Suisse demonstrates the importance of jurisdiction agreements. The Dubai Court of Cassation's 468/2024 decision demonstrates that ordinary civil transactions increasingly occur through digital communications. Finally, Techteryx v Aria Commodities illustrates the emergence of specialised digital-economy adjudication.

The fundamental proposition is:

The global nature of the internet does not create a single global civil-law jurisdiction. Instead, internet activity creates overlapping territorial, institutional, regulatory and contractual legal relationships.

For UAE civil law, the resulting challenge is to coordinate these systems while preserving:

jurisdictional certainty;

contractual autonomy;

data protection;

procedural fairness;

civil remedies;

effective enforcement.

Thus, the future of UAE internet governance is likely to be characterised not by the disappearance of territorial law, but by the increasing interaction of territorial civil law with transnational digital activity.

Short Exam Summary

Fragmentation of global internet legal governance refers to the regulation of global digital activity by multiple national, institutional, regulatory and private legal systems. In the UAE, this includes federal legislation, onshore courts, DIFC and ADGM regimes, specialised regulators, foreign laws, arbitration and platform contracts. The cases Graciela v Giacobbe, Lural v Listran, DFSA v Commissioner of Data Protection, Tavira Securities, Dhawan v Zurich, Goel v Credit Suisse, Dubai Cassation 468/2024, and Techteryx v Aria Commodities illustrate different aspects of jurisdiction, digital evidence, data protection, IT liability, contractual forum selection and digital-economy adjudication. The fundamental challenge is reconciling borderless digital activity with territorially organised civil-law systems.