CIVIL LAW AND UAE SOCIAL MEDIA LIABILITY UNDER UAE CYBER LAWS

1. Introduction

Social media has become an important part of communication, business, advertising and public discussion in the UAE. Platforms such as Instagram, Facebook, X, TikTok, Snapchat, YouTube and WhatsApp can, however, also be used to publish defamatory statements, disclose private information, circulate false information, threaten people, impersonate others or distribute manipulated images.

UAE law can impose both criminal and civil consequences for unlawful online conduct.

The principal federal legislation is Federal Decree-Law No. 34 of 2021 on Countering Rumours and Cybercrimes. The UAE legislation database continues to identify this as the federal Cybercrime Law.

The important point is:

Social media liability is not limited to the person who creates the original post. Publication, republication, circulation, disclosure, threats and other forms of digital participation may create legal consequences depending on the applicable provision and facts.

2. Meaning of Social Media Liability

Social media liability means the legal responsibility arising from unlawful content or conduct carried out through an online platform.

It may arise from:

Defamation;

Insult;

False information;

Rumours;

Privacy violations;

Publication of photographs without lawful consent;

Threats and cyber-extortion;

Disclosure of confidential information;

Impersonation or misuse of electronic accounts;

Harmful manipulated or altered digital material;

Unlawful disclosure of personal information;

Re-publication or forwarding of prohibited material.

Therefore, a social media dispute may have three interconnected dimensions:

Cybercrime → Civil wrong → Compensation/remedial order

3. Main UAE Cybercrime Law

The principal statute is:

Federal Decree-Law No. 34 of 2021 on Countering Rumours and Cybercrimes.

It applies to conduct involving information networks, information technology systems and electronic means. The legislation contains specific provisions dealing with defamation, privacy, cyber-threats, rumours and false information.

The law is particularly important because social-media activity can fall within the concept of an electronic or information-technology medium even where the communication is not a conventional public website.

4. Social Media Defamation – Article 43

Article 43 is one of the most important provisions.

It deals with a person who, through an information network, information technology means or information system:

insults another person; or

attributes a quality to another person that exposes that person to punishment or contempt by third parties.

The statutory penalty is imprisonment and/or a fine of between AED 250,000 and AED 500,000. The offence is aggravated where it is committed against a public official or a person entrusted with a public service during or because of the performance of that work.

Examples

A social-media user may face liability if he:

calls another person a criminal without lawful basis;

falsely accuses a person of fraud;

publishes insulting allegations concerning someone's character;

posts defamatory statements about a professional or business;

publishes an online accusation calculated to expose another person to public contempt.

The legal analysis depends on the exact words, context, intention, medium and surrounding circumstances.

5. Privacy Liability – Article 44

Article 44 protects private and family life against unlawful electronic interference.

The provision covers conduct such as:

recording or transmitting private communications;

publishing photographs or recordings in circumstances prohibited by law;

disclosing private information;

publishing material that invades privacy;

using electronic means to track or monitor persons unlawfully;

manipulating or processing images or recordings for prohibited purposes.

The basic penalty under Article 44 includes imprisonment of at least six months and/or a fine of AED 150,000 to AED 500,000 for the specified privacy offences.

Important principle

A photograph does not automatically become legally harmless merely because it was taken in a public or semi-public environment.

The legality of publication depends upon the circumstances, consent, purpose, statutory exceptions and the specific conduct involved.

6. False News and Rumours – Article 52

Article 52 addresses the electronic publication, republication, circulation and recirculation of false news, data, reports or misleading rumours and certain provocative communications.

The provision can apply where the conduct is capable of disturbing public peace, spreading terror, harming public interest, the national economy, public order or public health.

The basic penalty is imprisonment for at least one year and a fine of at least AED 100,000. More serious circumstances, including certain conduct against state authorities or conduct during epidemics, crises, emergencies or disasters, attract enhanced penalties.

Important point

The word "republish" is significant.

A person should not assume that liability exists only for the original creator. Reposting, forwarding or recirculating unlawful material can itself become legally significant when the statutory requirements are satisfied.

7. Cyber Threats and Extortion

Social media is also capable of creating liability through:

threats;

blackmail;

demands accompanied by threats;

threats to publish private photographs;

threats to disclose confidential information;

cyber-extortion.

Article 42 addresses cyber-extortion and cyber-threats using information networks or information technology.

Thus, a social-media message can potentially create liability even though no physical meeting has occurred.

8. Civil Liability Is Separate From Criminal Liability

A very important examination point is:

Criminal liability and civil liability are related but not identical.

Suppose A publishes a defamatory social-media post about B.

The same conduct may result in:

Criminal proceedings

The State may prosecute A under the Cybercrime Law.

Civil proceedings

B may seek compensation for:

material damage;

moral damage;

reputational harm;

professional damage;

emotional or psychological suffering where legally compensable;

other proven consequences.

The civil claim therefore focuses on reparation of harm, while criminal proceedings focus on punishment for the offence.

9. Elements of Civil Social-Media Liability

A useful exam framework is:

1. Unlawful act

There must be conduct contrary to law.

Example:

defamatory publication;

unlawful disclosure of private information;

unlawful publication of a photograph.

2. Damage

The claimant must establish legally recognizable harm.

Damage may be:

material;

moral;

reputational;

professional;

commercial.

3. Causation

The claimant must connect the unlawful publication with the claimed damage.

For example:

Defamatory post → loss of customers → proven financial loss

The causal connection must be established rather than assumed.

4. Legal responsibility

The court determines whether the defendant is legally responsible under the applicable legislation.

10. Moral Damage in Social-Media Cases

Social-media disputes frequently involve moral damage.

Moral damage may arise from:

injury to reputation;

humiliation;

emotional distress;

interference with dignity;

invasion of privacy;

damage to social standing.

A claimant does not necessarily have to demonstrate that every form of moral harm produced a precise monetary loss.

A 2026 Dubai Civil Court decision illustrates this distinction: following a criminal conviction for online insult, defamation and privacy violation, the civil court awarded AED 80,000 in moral damages, while finding insufficient evidence for the larger claimed financial loss. The result was reportedly upheld through appeal and cassation.

11. Material Damage

Material damage is different.

A claimant seeking substantial financial compensation should normally establish an identifiable financial consequence.

Examples include:

loss of business;

loss of customers;

loss of employment opportunity;

cancellation of a commercial relationship;

demonstrable professional losses;

expenses caused by the unlawful conduct.

The existence of an offensive post does not automatically prove the exact amount of financial loss.

Therefore:

Publication ≠ automatic proof of AED X financial loss.

The court assesses evidence and causation.

12. Social Media and Privacy

Privacy is particularly important because social-media users often publish:

photographs;

videos;

screenshots;

private messages;

telephone numbers;

addresses;

family information;

recordings;

workplace information.

Article 44 is therefore particularly relevant.

The law can apply even where the material itself is genuine. Privacy liability does not necessarily depend upon the information being false.

The statutory framework expressly addresses certain publication or disclosure of images, information and other material concerning private or family life.

13. Private WhatsApp Groups Can Still Create Liability

A common misconception is:

"It was a private WhatsApp group, so cybercrime law does not apply."

That is unsafe.

UAE legal analysis recognizes that information-technology media can include messaging applications. A recent UAE legal commentary reports a Court of Cassation decision holding that use of WhatsApp did not prevent application of the Cybercrime Law merely because the communication was not publicly accessible.

Similarly, in a February 2026 Dubai civil case, a defendant was ordered to pay AED 20,000 after a final criminal judgment concerning insulting messages in a WhatsApp group.

Thus:

Public post ≠ only possible liability

and

Private digital communication ≠ automatic immunity.

14. Republication and Forwarding

Social-media liability becomes especially important when content is forwarded.

Possible forms include:

retweeting;

reposting;

sharing an Instagram story;

forwarding a WhatsApp message;

sharing a video;

copying a defamatory caption;

publishing the material on another platform.

Article 52 expressly uses concepts including dissemination, re-dissemination, circulation and re-circulation in relation to specified false-news conduct.

The legal question is therefore not simply:

"Who created the original post?"

It can also be:

"Who knowingly or unlawfully circulated the material, and does the relevant statutory provision attach liability to that conduct?"

15. Social-Media Defamation and Truth

Truth does not automatically answer every social-media liability question.

There are several different legal issues:

Defamation

Whether the communication unlawfully harms another's reputation.

Privacy

Whether private information or images were disclosed unlawfully.

False information

Whether the content falls within the statutory prohibition on false or misleading information.

Public interest

Whether a lawful statutory or legal justification exists.

Therefore, even material that is factually accurate may raise a separate privacy issue depending on how it was obtained or published.

16. Manipulated Images and Digital Alteration

Digital editing creates another area of liability.

Examples include:

manipulated photographs;

altered videos;

fake screenshots;

edited voice recordings;

deepfake-type material;

altered images designed to humiliate another person.

Where electronic material is manipulated for prohibited purposes, Article 44 and other provisions of the Cybercrime Law may become relevant. The precise legal classification depends on the conduct and statutory elements.

17. Social Media and Businesses

Businesses can also become involved in social-media liability.

Examples:

defamatory advertisements against competitors;

false reviews;

fake customer accounts;

misleading commercial claims;

publication of employee information;

unauthorized customer photographs;

disclosure of confidential business information;

online accusations against competitors.

The dispute may involve:

Cybercrime Law + Civil liability + Commercial law + Consumer protection + Data/privacy rules

depending on the facts.

18. Social Media and Employees

Employees may face liability for:

publishing confidential employer information;

insulting managers or colleagues;

releasing customer data;

publishing internal documents;

making unlawful allegations;

threatening colleagues;

posting protected information.

At the same time, employers must also respect applicable employment, privacy and evidence rules.

A social-media dispute therefore should not automatically be treated as only an employment matter.

19. Social Media Evidence

Digital evidence can include:

screenshots;

URLs;

account names;

account identifiers;

timestamps;

electronic messages;

emails;

metadata;

platform records;

forensic reports;

device extraction;

witness evidence.

The UAE Evidence Law, Federal Decree-Law No. 35 of 2022, is relevant to electronic evidence in civil and commercial proceedings.

The important issue is not simply producing a screenshot.

The court may need to consider:

authenticity;

integrity;

source;

identity of the sender;

date and time;

whether the content was altered;

connection between the account and defendant;

surrounding circumstances.

20. Jurisdiction in Online Harm

Internet activity creates difficult jurisdiction questions because:

the defendant may be abroad;

the server may be abroad;

the platform may be foreign;

the claimant may be in the UAE;

the harm may occur in the UAE.

UAE jurisprudence has recognized jurisdictional significance where the harmful result is realized in the UAE.

A study of UAE jurisprudence reports a Dubai Court of Cassation decision concerning threats to publish personal photographs where the court rejected a jurisdictional objection because the criminal result was realized in Dubai.

Therefore:

Location of the keyboard ≠ necessarily the only relevant jurisdictional factor.

The place where the harmful result occurs can also be legally important.

21. Case Law

Case 1 – Abu Dhabi Court of Cassation, Criminal Division, Case No. 917/2023

Issue

Social-media content involving defamation/hate-speech-related conduct.

Principle

The case is reported as an important UAE authority concerning the criminal boundaries applicable to harmful expression on social media.

Importance

It demonstrates that social-media communication is assessed under the specific statutory framework rather than being treated as completely unrestricted expression.

Case 2 – Dubai Court of Cassation, Criminal Cassation Case No. 536/2024

Issue

Electronic invasion of privacy.

Principle

The Court considered the criminal elements of privacy invasion through information technology.

The reported judgment held that the material element could be established through prohibited spying or voyeuristic conduct using information technology without consent. The case also addressed the required mental element.

Importance

It is useful for understanding that social-media privacy liability is not limited to defamatory statements.

Case 3 – Abu Dhabi Court of Cassation, Civil Case No. 853/2024

Issue

Civil compensation arising from harmful online conduct.

Principle

The case is reported as involving substantial compensation for proven material damage arising from unlawful online conduct.

Importance

It demonstrates that cyber-related wrongdoing can produce a separate civil compensation consequence in addition to criminal consequences.

A UAE academic study identifies the case as a civil authority concerning compensation arising from harmful online conduct.

Case 4 – Abu Dhabi Court of Cassation, Civil Case No. 183/2022

Issue

Compensation for harmful conduct involving online publication.

Principle

The case is reported as involving substantial compensation for civil harm.

Importance

It illustrates that the monetary consequences of unlawful online conduct depend upon the harm proved before the civil court.

Case 5 – Abu Dhabi Court of Cassation, Civil Case No. 102/2024

Issue

Assessment of damage arising from wrongful conduct.

Principle

The case is identified in UAE legal research concerning compensation and the relationship between unlawful conduct and resulting harm.

Importance

It is relevant to the damage and causation side of social-media liability, rather than being treated as a pure defamation authority.

Case 6 – Dubai Court of Cassation, Criminal Cassation Case No. 2024/1001

Issue

Defamation through an information-technology medium and reconciliation.

Principle

The case concerned the interaction between an electronic defamation charge under Article 43 and the statutory reconciliation provisions.

Importance

It demonstrates that procedural and settlement consequences can become important even after an electronic defamation allegation has been made.

Case 7 – Dubai Court of Cassation, Criminal Cassation Case No. 2024/1003

Issue

Article 43 cyber-defamation and reconciliation.

Principle

The reported litigation concerned the argument that reconciliation should have consequences for the criminal proceedings where the offence falls within the relevant reconciliation provision.

Importance

The case demonstrates the importance of identifying not only the substantive offence but also the procedural provisions governing its prosecution and reconciliation.

Case 8 – Dubai Civil Court, 25 February 2026 – WhatsApp Insult Case

Facts

A defendant posted insulting and defamatory expressions concerning another person in a WhatsApp group.

A criminal judgment had already established the defendant's liability.

Result

The Dubai Court of First Instance awarded AED 20,000 in civil compensation.

Importance

The case demonstrates the relationship:

Digital insult → criminal conviction → civil compensation

and confirms that a WhatsApp group is not necessarily outside the scope of legal responsibility.

Case 9 – Dubai Civil Court, 2026 Social-Media Defamation Case

Facts

A defendant published photographs of a lawyer and accompanying offensive remarks on social-media platforms without consent.

Result

The civil court awarded AED 80,000 for moral damage, ordered removal of the content, and the judgment was reported as having been upheld through appeal and cassation.

Importance

This case is particularly useful for examinations because it combines:

defamation;

insult;

privacy;

social-media publication;

criminal conviction;

removal of digital content;

moral damages;

insufficient proof of larger financial losses.

22. Effect of a Criminal Judgment on a Civil Claim

A particularly important practical situation is:

Criminal case first → civil compensation claim later.

Where a final criminal judgment establishes the commission of an offence and the identity of the responsible person, that finding can have significant evidentiary and procedural consequences in the subsequent civil claim.

The 2026 Dubai social-media case illustrates this interaction: the civil court treated the final criminal findings concerning insult, defamation and privacy as established rather than reopening the criminal issues.

The civil court then focused on the extent and nature of the damage.

23. Removal of Content as a Remedy

Civil social-media liability is not necessarily limited to money.

Depending on the applicable proceedings and statutory powers, remedies may include:

removal of unlawful content;

prevention of continued publication;

cessation of unlawful conduct;

compensation;

other protective or procedural orders.

The 2026 Dubai social-media case is an example in which removal of offensive online content accompanied the compensation consequences.

Thus:

Remedy = Compensation + Removal/Prevention + Other lawful orders

depending on the case.

24. Social Media Liability and Freedom of Expression

UAE social-media law requires careful distinction between:

Lawful expression

Examples may include:

legitimate opinion;

lawful criticism;

ordinary discussion;

factual reporting where legally permitted.

Unlawful conduct

Examples may include:

criminal insult;

defamation;

unlawful disclosure of private information;

prohibited false information;

threats;

cyber-extortion.

The legal question is therefore not simply:

"Was the statement negative?"

The court must consider the content, context, legal provision, evidence and circumstances.

25. Liability of the Original Creator

The original creator of unlawful content may face:

criminal prosecution;

fines;

imprisonment where prescribed;

civil compensation;

removal orders;

other statutory consequences.

The creator is generally the easiest person to identify when account ownership and publication are established.

26. Liability of the Reposter or Forwarder

A person who republishes or circulates unlawful content should not assume immunity merely because somebody else created it.

This is particularly clear in the statutory language of Article 52, which expressly addresses publication, republication, circulation and recirculation for specified false-news conduct.

Therefore:

Original post → Repost → Forward → Wider circulation

may create additional legal exposure depending on the particular offence.

27. Liability of Platform Operators

Platform liability must be distinguished from user liability.

A platform operator is not automatically liable simply because unlawful material exists on its service.

The legal analysis depends on:

applicable statutory duties;

knowledge;

notice;

orders issued by competent authorities;

whether the platform or account holder is legally required to remove content;

compliance with lawful orders.

Article 53, for example, addresses certain situations involving websites or electronic accounts that store, make available or publish illegal content and fail to remove or prevent access within the period specified in lawful orders.

Therefore:

User liability ≠ automatic platform liability.

28. Social Media and Personal Data

Social-media disputes may also involve personal-data protection.

Potentially relevant legislation includes:

Federal Decree-Law No. 45 of 2021 on Personal Data Protection;

Federal Decree-Law No. 34 of 2021 on Countering Rumours and Cybercrimes;

Federal Decree-Law No. 35 of 2022 on Evidence;

applicable civil-law principles.

The same incident can therefore generate multiple legal questions.

For example:

Employee photograph → posted online → personal-data/privacy issue → cybercrime issue → civil damages issue

29. Social Media and Reputation

Reputation is particularly vulnerable online because digital publication has:

speed;

broad geographical reach;

permanence;

easy republication;

searchability;

screenshot capability.

Consequently, the claimant may argue that the publication created:

reputational injury;

emotional harm;

professional harm;

business losses;

loss of customers;

privacy injury.

But courts still require a legally sufficient connection between the unlawful act and the claimed damage.

30. Social Media Liability and Causation

Causation can be difficult.

For example:

A posts a defamatory statement about B.

B claims AED 2 million in business losses.

B must distinguish:

Post → actual business loss

from merely asserting:

Post → possible business loss.

Evidence could include:

cancelled contracts;

customer communications;

accounting records;

sales data;

employment records;

professional evidence;

expert evidence where appropriate.

The 2026 Dubai social-media case is instructive because the court accepted moral harm but did not accept the larger claimed financial loss without sufficient proof.

31. Social Media Liability and Good Faith

Good faith does not create a universal defence to unlawful online conduct.

A person should therefore be careful about:

repeating allegations;

forwarding unverified material;

publishing personal information;

accusing someone of a crime;

posting private photographs;

sharing confidential conversations.

The safest legal approach is to verify information and avoid publishing material that unlawfully harms another person's rights.

32. Main Differences: Criminal and Civil Liability

33. Important Practical Distinction

The following four concepts should not be confused:

1. Cybercrime

The conduct satisfies a criminal provision.

2. Civil wrong

The conduct causes legally compensable harm.

3. Damage

The claimant demonstrates actual material or moral injury.

4. Remedy

The court determines the appropriate relief.

Therefore:

Illegal post → not necessarily automatic AED compensation of any amount.

The claimant still needs to establish the appropriate civil consequences.

34. Mainland UAE vs DIFC

A very important exam point is that UAE is not one completely uniform judicial system.

Mainland UAE

The federal Cybercrime Law and federal civil legislation are central.

DIFC

DIFC has its own laws and courts, including a separate common-law-based legal framework in many commercial matters.

DIFC decisions can be highly useful for understanding digital disputes, but they should not automatically be described as binding authorities on mainland UAE courts.

Therefore, a legal answer should clearly state whether a case is:

Federal UAE;

Dubai/Abu Dhabi/Ras Al Khaimah court;

DIFC;

ADGM.

35. Common Defences and Issues

A defendant may raise issues concerning:

Identity

Was the defendant actually the person who controlled the account?

Authenticity

Has the claimant established that the screenshot or message is genuine?

Context

Was the statement taken out of context?

Meaning

Did the words actually amount to insult or defamation?

Consent

Was there consent to publication or recording?

Truth/factual basis

What exactly was alleged and what evidence supports it?

Causation

Did the publication actually cause the claimed financial loss?

Jurisdiction

Which court has jurisdiction?

Reconciliation

Does the relevant offence permit reconciliation and what is its procedural effect?

36. Important Case-Law Principles – Quick Table

The first group of cases is identified in UAE legal research and current UAE legal commentary; the two 2026 Dubai civil decisions are recent reported examples.

37. Social Media Liability Formula

For examination purposes, remember:

POST → OFFENCE → DAMAGE → CAUSATION → EVIDENCE → REMEDY

POST

What was published?

OFFENCE

Which Cybercrime Law provision applies?

DAMAGE

What harm occurred?

CAUSATION

Did the publication cause that harm?

EVIDENCE

Can the claimant prove the post, identity, publication and damage?

REMEDY

Compensation, removal, criminal penalty or another appropriate order.

38. Example

Suppose A publishes on Instagram:

"B is a criminal who steals money from customers."

Assume the statement is unlawful and unsupported.

Potential legal analysis:

The statement is published electronically.

It may fall within Article 43 if its statutory elements are satisfied.

B may initiate appropriate criminal proceedings.

B may separately pursue civil compensation for proven harm.

B may claim moral damage to reputation.

If B claims business losses, evidence of those losses becomes important.

The court may consider removal or other appropriate relief.

If A republishes the allegation elsewhere, the additional publication may create further legal issues.

39. Another Example – Private Photograph

A obtains B's private photograph and publishes it on social media without lawful consent.

Possible legal issues include:

invasion of privacy;

electronic publication;

unlawful disclosure;

civil moral damage;

removal of the material;

criminal consequences under the Cybercrime Law.

The precise result depends on the facts and statutory exceptions.

40. Another Example – WhatsApp Group

A sends insulting messages concerning B to a WhatsApp group.

The fact that the group is private does not automatically eliminate legal responsibility.

The court may examine:

the exact language;

recipients;

context;

identity of sender;

evidence of publication;

applicable cybercrime provision;

resulting harm.

The February 2026 Dubai decision demonstrates that insulting WhatsApp communications can lead to civil compensation after criminal proceedings.

41. Overall Legal Position

The UAE approach to social-media liability can be summarized as follows:

Social-media activity can fall within the Cybercrime Law.

Online insult and defamation are specifically regulated.

Privacy violations can generate criminal liability.

False news and rumours are specifically regulated.

Republication and circulation can be legally significant.

Private messaging platforms are not automatically outside cybercrime legislation.

A criminal offence may also produce civil liability.

Moral damage can be compensable.

Material loss normally requires appropriate proof.

Digital evidence is central to proving online conduct.

Removal of unlawful content can be an important remedy.

Platform liability and user liability must be separately analysed.

Jurisdiction can depend on where the harmful act or result occurred.

DIFC and ADGM must be distinguished from mainland UAE law.

42. Conclusion

Social Media Liability Under UAE Cyber Laws is a combination of criminal cyber regulation and civil responsibility.

The central legislation is Federal Decree-Law No. 34 of 2021 on Countering Rumours and Cybercrimes. Article 43 addresses electronic defamation and insult, Article 44 protects privacy against specified electronic interference, Article 42 addresses cyber-threats and extortion, and Article 52 regulates specified forms of false news and rumours.

The civil side is equally important. An unlawful social-media publication may produce moral damage, reputational harm and, where proved, material financial loss. Recent Dubai decisions illustrate that courts can award compensation and order removal of harmful online material, while distinguishing proven moral harm from inadequately proved financial loss.

Final Exam Formula

SOCIAL MEDIA POST
↓
CYBERCRIME LAW
↓
DEFAMATION / INSULT / PRIVACY / FALSE INFORMATION / THREAT
↓
PROOF OF DIGITAL CONDUCT
↓
DAMAGE + CAUSATION
↓
CRIMINAL CONSEQUENCES + CIVIL COMPENSATION / REMEDIES

One-Line Revision Rule

In UAE law, social-media publication is not legally consequence-free: unlawful online conduct may create criminal liability under the Cybercrime Law and, where legally recognized harm is proved, separate civil liability for compensation and other remedies.