Civil Law and UAE: Misinformation Spread and Platform Liability

1. Introduction

Misinformation spread and platform liability concern the civil and regulatory consequences of false, misleading, defamatory or unlawfully harmful information circulated through:

• social-media platforms;
• websites;
• messaging applications;
• online marketplaces;
• video-sharing services;
• digital news platforms;
• blogs;
• forums;
• automated recommendation systems;
• other information networks.

In UAE law, this subject cannot be reduced to a single “platform liability” rule. It involves the interaction of:

1. Federal Decree-Law No. 34 of 2021 on Countering Rumors and Cybercrimes;
2. the Crimes and Penalties Law;
3. civil liability and damages principles;
4. privacy and personal-data legislation;
5. media regulation;
6. electronic-transactions legislation;
7. applicable company/contract law;
8. DIFC/ADGM laws where those jurisdictions have jurisdiction.

The 2021 Cybercrimes Law specifically regulates the dissemination and re-dissemination of false news, misleading reports and rumours through information networks and information-technology means. Article 52 addresses spreading rumours and false news, while Article 43 separately addresses online defamation and slander.

A critical distinction is:

Liability of the person who creates or reposts misinformation is not automatically the same as liability of the platform through which the information travels.

2. Meaning of Misinformation

“Misinformation” broadly describes information that is false, inaccurate or misleading.

It may arise through:

• an accidental false statement;
• inaccurate reporting;
• manipulated statistics;
• fabricated documents;
• misleading headlines;
• altered photographs or videos;
• deepfakes;
• false reviews;
• impersonation;
• coordinated rumours;
• malicious reposting.

It is useful to distinguish:

Misinformation

False information circulated without necessarily proving an intention to deceive.

Disinformation

False information deliberately created or distributed to deceive or cause a particular effect.

Defamation

A legally actionable publication that harms another person's reputation, subject to the applicable legal requirements.

Cybercrime

Conduct specifically criminalised by the Cybercrimes Law.

The same online publication may potentially raise criminal, civil, regulatory and contractual issues simultaneously.

3. UAE Statutory Framework

A. Federal Decree-Law No. 34 of 2021

The Cybercrimes Law is the principal federal statute dealing specifically with online misinformation.

Article 52 addresses the use of information networks or information-technology means to:

• announce;
• disseminate;
• re-disseminate;
• circulate;
• re-circulate

false news, data, misleading or erroneous rumours or reports, and specified other categories of false or misleading information.

This is important because reposting is expressly relevant.

A person cannot necessarily avoid legal responsibility merely by saying:

“I did not create the original false statement; I only shared it.”

4. Article 43 — Online Defamation

Article 43 deals specifically with defamation and slander through:

• information networks;
• information-technology means;
• information systems.

It criminalises insulting another person or attributing a quality to that person that could expose the person to punishment or contempt by third parties. The provision carries imprisonment and/or a fine between AED 250,000 and AED 500,000, with an aggravating circumstance where the victim is a public official or person entrusted with a public service and the offence is connected to that work.

Therefore:

False information + identifiable person + reputational harm can potentially move from ordinary misinformation into online-defamation territory.

5. Article 44 — Privacy

Misinformation campaigns often involve more than false statements.

They may also disclose:

• private photographs;
• personal communications;
• family information;
• medical information;
• private correspondence;
• confidential personal information.

Article 44 separately regulates unlawful invasion of privacy through information networks and information technology.

Therefore, a platform dispute can involve several independent legal interests:

reputation + privacy + data protection + economic loss.

6. False News and Public Harm

The UAE Crimes and Penalties Law also contains provisions addressing the publication or broadcasting of false or tendentious news, statements or rumours where they produce specified effects such as:

• disturbance of public security;
• causing public panic;
• harming the public interest;
• inciting or antagonising public opinion.

Article 217 provides the relevant criminal framework.

This demonstrates that UAE law distinguishes between:

Private reputational misinformation

and

Misinformation capable of producing wider public consequences.

7. Who Is the Primary Wrongdoer?

The starting point should normally be:

Who created, published, transmitted or deliberately amplified the false information?

Potential actors include:

1. original author;
2. person who knowingly reposted it;
3. administrator of an online group;
4. influencer;
5. company publishing the statement;
6. advertiser;
7. media organisation;
8. platform operator;
9. automated system operator.

Liability must be determined actor by actor.

The existence of a platform does not automatically transfer responsibility from the original speaker to the platform.

8. Platform Liability

A platform can theoretically occupy several different roles.

Model 1 — Passive intermediary

The platform merely provides technical infrastructure.

Example:

A user independently uploads a false statement.

Model 2 — Active publisher

The platform itself creates, edits or publishes the allegedly unlawful content.

Model 3 — Algorithmic amplifier

The platform's recommendation system significantly increases distribution.

Model 4 — Notice-and-failure situation

The platform receives sufficiently specific notice of unlawful material but allegedly fails to take an action required by applicable law, contract or court order.

Model 5 — Commercial content provider

The platform itself creates or controls advertisements, reviews or commercial representations.

These different roles can produce different legal consequences.

9. No Automatic Rule of Platform Liability

A central principle for UAE civil-law analysis is:

Hosting unlawful content does not, by itself, establish every element of civil liability against the platform.

A claimant still has to identify the applicable legal duty.

Possible bases include:

• statutory duty;
• contractual duty;
• negligence or other civil wrong;
• privacy violation;
• intellectual-property infringement;
• failure to comply with a court order;
• specific regulatory obligations;
• participation in the wrongful act.

The exact liability analysis depends heavily on the platform's role and the applicable jurisdiction.

10. Civil Liability Framework

A useful UAE civil-law framework is:

1. Wrongful act

Was there a legally wrongful publication, omission or other conduct?

2. Damage

What harm occurred?

3. Causation

Did the conduct cause the claimed damage?

4. Attribution

Can the damage legally be attributed to the defendant?

5. Remedy

What relief is legally available?

This becomes particularly important for platform cases because the existence of misinformation does not automatically prove that the platform caused every consequence claimed by the claimant.

11. Reputation as Damage

Reputational injury may produce:

• loss of customers;
• loss of business opportunities;
• loss of employment;
• reduced commercial standing;
• emotional/non-economic harm where legally recognised.

But an important DIFC authority illustrates a useful civil-law principle.

In Eshraq Investments PJSC v Shehab M. Gargash & Others [2021] DIFC CFI 077, the DIFC Court stated that damage to reputation is a head of damage resulting from a wrong rather than an independent cause of action in itself. The court stressed that reputational damage must be consequent upon an actionable wrong.

Revision formula

Reputational damage needs a legal wrong to which the damage can be attached.

This is particularly important in platform litigation.

12. Causation in Platform Cases

Suppose:

• User A publishes false information.
• Platform B hosts it.
• Algorithm C recommends it.
• 500,000 people view it.
• Company D loses customers.

The claimant must still analyse:

Who caused what?

Potential causal links include:

User → publication

Platform → hosting

Algorithm → amplification

Readers → commercial reaction

The claimant may need to distinguish the harm caused by the original publication from additional harm caused by amplification.

13. Case Law 1 — Eshraq Investments PJSC v Gargash

Eshraq Investments PJSC v Shehab M. Gargash & Others [2021] DIFC CFI 077

This is one of the most useful UAE/DIFC authorities for misinformation and reputational harm.

The proceedings involved allegations concerning:

• false announcements;
• a criminal complaint;
• a defamatory campaign;
• WhatsApp circulation;
• market communications;
• alleged fraud allegations;
• financial impact on business reputation. 

The court emphasised that reputational damage is not itself a standalone cause of action. It must flow from an actionable wrong.

Principle

Reputational loss must be connected to an actionable legal wrong.

Platform relevance

This principle can apply where a claimant says:

“The platform caused reputational damage.”

The claimant should identify the underlying actionable conduct rather than treating “reputational damage” itself as the entire cause of action.

14. Case Law 2 — Mohammad Abu AlHaj v Sheikh Sultan

Mohammad Abu AlHaj & Abu AlHaj Holding v Sheikh Sultan Khalifa Sultan Al Nehayan [2015] DIFC CFI 016

The claimant alleged that defendants told clients and others that he had stolen money from a company and fled the country.

The court found the defamation pleading fundamentally defective because the claimant had not sufficiently identified:

• the words;
• when they were published;
• to whom they were published;
• the relevant publication circumstances.

The court emphasised that publication must be sufficiently particularised for a defamation claim to be properly determined.

Principle

A vague allegation that “the defendant told everyone” is not an adequate substitute for proof of publication.

Platform relevance

A claimant should identify:

• post;
• account;
• date;
• audience;
• wording;
• repost;
• URL/platform location where applicable;
• connection to the defendant.

15. Case Law 3 — GFH Capital v Haigh

GFH Capital Limited v David Lawrence Haigh [2014] DIFC CFI 020

The case involved a proposed defamation counterclaim concerning publication outside the immediate proceedings.

The DIFC Court observed that a defamation claim ordinarily requires consideration of whether publication would cause damage to reputation, understood by reference to how the person is regarded by ordinary right-thinking people.

Principle

Reputation is assessed by reference to the perception of the relevant audience, not merely the claimant's subjective reaction.

Platform relevance

Online misinformation requires identifying the audience:

• followers;
• customers;
• investors;
• employees;
• general public;
• particular professional community.

16. Case Law 4 — Sam Precious Metals v Snyder Prime

Sam Precious Metals FZ-LLC v Snyder Prime Ltd & Others [2023] DIFC CFI 030

The case included allegations that defendants had spread defamatory statements to:

• governmental authorities;
• market participants;
• clients/customers.

The claims included alleged reputational damage and compensation.

The case is particularly relevant to commercial misinformation because the alleged publications were directed at a company's business environment rather than merely private interpersonal communications.

Principle

The commercial context and identity of the audience can be central to establishing reputational and economic consequences.

17. Case Law 5 — Lutyans v Litha

Lutyans v Litha [2021] DIFC CFI 042

The claimant alleged defamation arising from an email concerning alleged inappropriate conduct.

The DIFC Court considered whether the dispute, including the defamation claim, fell within an arbitration agreement. The court rejected the argument that an arbitrator could not deal with a defamation claim and observed that an arbitrator could hear evidence and apply the relevant law just as a judge could.

Principle

The presence of a defamation issue does not necessarily prevent it from being dealt with in arbitration where the arbitration agreement and applicable law permit it.

Platform relevance

A platform-related dispute may also involve:

• platform contracts;
• user terms;
• arbitration clauses;
• jurisdiction clauses.

18. Case Law 6 — Genisis v Griame LLC

Genisis v Griame LLC [2016] DIFC SCT 131

The dispute concerned alleged interference with a company's LinkedIn page.

The defendant alleged that the claimant had:

• altered the company's LinkedIn information;
• changed its status to “Out of Business”;
• changed its location;
• thereby caused reputational/business harm.

The court found that even assuming wrongful interference, the defendant failed to prove actual business or opportunity loss directly resulting from the changes. The damages claim was dismissed.

Principle

Online reputational interference does not automatically establish recoverable damages; causation and actual loss must still be proved.

This is highly relevant to platform disputes.

19. Case Law 7 — Merut v Musort

Merut v Musort [2023] DIFC SCT 383

The defendant sought compensation based on negative social-media remarks concerning the company.

The case illustrates an important evidentiary point: an assertion that social-media statements damaged a business does not automatically establish a compensable loss. The claimant must connect the statements with the claimed legal injury.

Principle

Social-media publication + alleged reputational harm ≠ automatically proven damages.

20. Case Law 8 — AES Middle East Insurance Broker v GSB Capital

AES Middle East Insurance Broker LLC v GSB Capital Ltd [2023] DIFC CFI 060

This extensive litigation involved allegations concerning:

• WhatsApp;
• LinkedIn;
• social-media communications;
• alleged confidential information;
• client solicitation;
• alleged defamatory statements.

The court carefully examined the evidence surrounding alleged social-media conduct rather than treating social-media activity itself as proof of wrongdoing. It also distinguished confidential client information from ordinary professional connections on LinkedIn and WhatsApp.

Principle

Digital communication evidence must be analysed for its actual content, context, confidentiality and causal significance.

21. Case Law Summary

22. Is a Platform Liable for User Posts?

The answer should not be expressed as an automatic yes or no.

Instead, ask five questions.

Question 1 — Did the platform create the content?

If yes, the platform is much closer to the original publisher.

Question 2 — Did it materially edit the content?

Editing can alter the legal analysis.

Question 3 — Did it know about the unlawful content?

Actual knowledge may become relevant under applicable law.

Question 4 — Did it have a legal duty to act?

The duty may arise from:

• legislation;
• regulation;
• court order;
• contract;
• another recognised legal obligation.

Question 5 — Did its conduct cause legally recoverable damage?

Even if a duty existed, causation and damage must still be established.

23. Notice and Takedown

A recurring issue is:

What happens after the platform receives notice?

The analysis may involve:

Publication → notice → verification → response → continued publication → further dissemination → damage.

But UAE law should not be analysed as though there is a universally applicable private-law “notice-and-takedown safe harbour” identical to another jurisdiction's intermediary-liability statute.

The precise statutory or contractual basis for platform responsibility must be identified.

24. Algorithmic Amplification

Modern platforms create a new issue.

A platform may not create the false statement, but its algorithm may recommend it to millions of users.

This creates a difficult civil-law question:

Does algorithmic amplification constitute an independent legally relevant act?

Potential factors include:

• whether amplification was automatic;
• whether the platform knew the content was unlawful;
• whether the platform actively selected the audience;
• whether the recommendation system was designed to maximise engagement;
• whether the platform received complaints;
• whether applicable law imposed a duty to intervene;
• whether the amplification materially increased the damage.

At present, this should be treated as an emerging legal issue, not as a settled UAE doctrine establishing automatic platform liability.

25. AI-Generated Misinformation

AI introduces additional forms of misinformation:

• deepfake videos;
• synthetic photographs;
• cloned voices;
• fabricated documents;
• AI-generated news;
• impersonation;
• automated bot accounts.

Potentially relevant legal questions include:

1. Who operated the AI system?
2. Who supplied the prompt/data?
3. Who published the output?
4. Who knew it was false?
5. Who distributed it?
6. Was the output edited before publication?
7. Was there a platform recommendation?
8. Was personal data unlawfully processed?
9. Did the content cause identifiable damage?

The basic civil-law framework remains:

Conduct → attribution → wrong → causation → damage → remedy.

26. Deepfakes

A deepfake may simultaneously involve:

Defamation

False statements about a person.

Privacy

Unauthorised use of personal images or information.

Identity misuse

Impersonation.

Intellectual property

Unauthorised use of protected content.

Cybercrime

Where the conduct falls within the relevant criminal provisions.

Civil damages

Where legally recognised harm is established.

Thus, a single deepfake can create multiple causes of action.

27. Economic Misinformation

Misinformation does not need to concern an individual's reputation.

It can concern:

• listed companies;
• securities;
• investments;
• cryptocurrency;
• financial institutions;
• products;
• competitors;
• market conditions.

For example:

A false online statement says that a listed company has become insolvent.

Potential consequences include:

• investor losses;
• market disruption;
• reputational harm;
• regulatory consequences;
• contractual disputes.

The relevant claim may involve securities or commercial regulation in addition to ordinary civil liability.

28. False Reviews and Online Marketplaces

A platform may host:

• fake customer reviews;
• manipulated ratings;
• fabricated complaints;
• false competitor reviews.

Potential legal issues include:

• consumer protection;
• commercial fraud;
• unfair competition;
• defamation;
• contractual obligations;
• platform terms;
• economic loss.

The platform's liability depends on whether it:

• merely hosted the review;
• created it;
• paid for it;
• knowingly promoted it;
• ignored a legally sufficient notice;
• made its own representations concerning review authenticity.

29. Platform Terms and Contractual Liability

A platform's relationship with users may be contractual.

Its terms may address:

• prohibited content;
• moderation;
• complaints;
• account suspension;
• intellectual property;
• dispute resolution;
• jurisdiction;
• limitation of liability.

But contractual terms cannot necessarily eliminate liability imposed by mandatory UAE law.

The analysis therefore becomes:

Contractual allocation + mandatory law + public order + applicable civil liability.

30. Privacy and Data Protection

Misinformation campaigns frequently involve personal data.

Examples:

• publishing a person's telephone number;
• revealing private emails;
• publishing private photographs;
• exposing medical information;
• releasing identification documents;
• doxxing.

Therefore, a claimant may have claims based not merely on reputational harm but also on privacy and personal-data protection.

This can materially increase the platform's regulatory obligations where it processes or controls personal data.

31. Removal, Correction and Damages

Possible remedies can include:

1. Removal

Taking unlawful content offline where the legal basis exists.

2. Correction

Correcting false information.

3. Injunction

Preventing continued publication.

4. Damages

Compensating legally established loss.

5. Restitution

Restoring improperly obtained benefits where applicable.

6. Declaratory relief

Obtaining a judicial declaration concerning rights.

7. Account suspension

Where authorised by applicable law or contract.

8. Preservation of evidence

Preventing deletion of relevant digital evidence.

32. Interim Injunctions Are Particularly Important

Misinformation spreads rapidly.

A final judgment may arrive months later, after the content has:

• been copied;
• reposted;
• archived;
• translated;
• reproduced;
• indexed;
• distributed through multiple platforms.

Therefore, interim relief can sometimes be more practically important than final damages.

A claimant may seek relief to prevent continuing publication where the jurisdictional and procedural requirements are satisfied.

33. Digital Evidence

A misinformation case requires careful preservation of:

• screenshots;
• URLs;
• timestamps;
• account identifiers;
• metadata;
• repost history;
• comments;
• direct messages;
• platform notices;
• takedown requests;
• algorithmic recommendation records where obtainable.

The claimant should establish:

Who → said what → where → when → to whom → how widely → with what consequence.

This is consistent with the reasoning in Abu AlHaj, where the court stressed the importance of identifying the publication and its circumstances.

34. The Problem of Reposts

Reposting deserves special attention.

Under the Cybercrimes Law, Article 52 expressly covers re-dissemination, circulation and re-circulation of specified false news/data and misleading or erroneous rumours or reports.

Therefore:

“I only reposted it” is not automatically a defence.

The legal position still depends on the precise content, circumstances and applicable provisions.

35. Platform vs User: Comparative Liability Model

36. Important Civil-Law Principle: No Strict Liability Merely Because Harm Occurred

A platform claimant cannot normally reason:

“The false post appeared on Platform X, therefore Platform X owes me damages.”

The claimant must establish the legal basis for liability.

This is consistent with the reasoning in Genisis v Griame, where alleged LinkedIn interference did not produce an award because the defendant failed to prove the claimed business loss and causal connection.

37. Public Interest and Freedom of Expression

Misinformation law must also be distinguished from legitimate:

• criticism;
• opinion;
• reporting;
• commentary;
• public-interest discussion.

The legal question is not simply whether a statement is:

“negative.”

A platform or claimant must distinguish:

Fact capable of being true or false

from

Opinion or criticism

and then consider the applicable UAE rules concerning unlawful publication, defamation, public order and other restrictions.

The Eshraq judgment is particularly useful in recognising that overbroad treatment of reputational harm can have implications for legitimate publication and press freedom.

38. Jurisdictional Distinction

Mainland UAE

Relevant sources include:

• Federal Cybercrimes Law;
• Crimes and Penalties Law;
• Civil Transactions Law;
• Evidence Law;
• Personal Data Protection Law;
• Media Law;
• Consumer Protection Law;
• other sector-specific legislation.

DIFC

DIFC has:

• its own civil/commercial laws;
• common-law-based legal principles;
• its own courts;
• its own procedural framework.

The defamation decisions cited above are primarily DIFC authorities.

ADGM

ADGM similarly has its own legal framework and applies substantial English common-law principles.

Therefore:

A DIFC defamation judgment should not automatically be presented as a binding mainland UAE precedent.

39. Six Core Cases to Memorise

For examination purposes, remember these six first:

1. Eshraq Investments v Gargash

Reputation damage must flow from an actionable wrong.

2. Abu AlHaj v Sheikh Sultan

Defamation must be properly particularised.

3. GFH Capital v Haigh

Publication and reputational harm must be legally established.

4. Sam Precious Metals v Snyder Prime

Commercial dissemination and reputational damage require proof.

5. Genisis v Griame

Social-media interference requires proof of causally connected loss.

6. Lutyans v Litha

Defamation disputes can potentially fall within arbitration where the arbitration agreement permits it.

Additional useful cases are Merut v Musort and AES v GSB Capital.

40. Examination Problem Framework

If an examination question states:

“A false statement is uploaded to a social-media platform and causes financial and reputational loss. Is the platform liable?”

Use this sequence:

Step 1 — Identify the content

Is it:

• false news?
• rumour?
• defamatory statement?
• private information?
• opinion?
• commercial representation?

Step 2 — Identify the creator

Who originally produced it?

Step 3 — Identify dissemination

Who:

• published;
• reposted;
• circulated;
• amplified?

Step 4 — Identify platform role

Was the platform:

• creator;
• editor;
• host;
• recommender;
• advertiser;
• intermediary?

Step 5 — Identify legal duty

Which law imposes the alleged duty?

Step 6 — Establish damage

What exactly was lost?

Step 7 — Establish causation

Did the defendant's conduct cause that loss?

Step 8 — Consider evidence

Can the claimant prove:

• publication;
• identity;
• audience;
• timing;
• falsity;
• damage?

Step 9 — Select remedy

Potential remedies include:

• removal;
• injunction;
• correction;
• damages;
• restitution;
• other statutory relief.

41. Quick Revision Table

42. Conclusion

UAE law treats misinformation as a multi-dimensional legal problem, not simply as a social-media dispute.

The federal Cybercrimes Law is particularly important because it directly addresses the dissemination and re-dissemination of false news, misleading reports and rumours, while Article 43 separately addresses online defamation and Article 44 addresses certain privacy violations.

For civil liability, however, the critical analytical sequence remains:

Wrongful publication/conduct → legal duty → attribution → causation → damage → remedy.

The cases Eshraq Investments, Abu AlHaj, GFH Capital, Sam Precious Metals, Genisis, Lutyans, Merut and AES demonstrate that UAE/DIFC courts pay particular attention to what was actually published, who published it, to whom it was communicated, whether the publication constituted an actionable wrong, and whether the claimed loss was actually caused by it.

One-line revision formula

False content → publication/republication → platform role → legal duty → causation → damage → removal/injunction/damages.