In the UAE, the use of Virtual Private Networks (VPNs) is not inherently illegal, provided it adheres to the guidelines set by the Telecommunications and Digital Government Regulatory Authority (TDRA).
On July 31, 2016, the TDRA reassured businesses and the public of its commitment to ensuring the security and smooth operation of economic activities for UAE-based companies and institutions.
The authority emphasized that no regulations prohibit companies, institutions, and banks from using VPN technology to access their internal networks via the internet. However, users may face legal consequences if they misuse VPNs.
Specifically, activities such as circumventing the information network to commit a crime, or using techniques like disguising one's IP address to commit illegal acts or avoid detection, are considered serious offences under UAE law.
According to Article 10 of Law No. 34 of 2021 Concerning Combatting Rumours and Cybercrimes, those found guilty of such acts can face imprisonment and/or fines ranging from Dh500,000 to Dh2,000,000. The law stipulates that anyone who fraudulently uses a computer network protocol address belonging to a third party or employs other means to commit a crime or prevent its discovery will be punished accordingly.
Moreover, Clause 1.9 of the TDRA Regulatory Policy on Internet Access Management of 2017 defines "Prohibited Content Categories," detailed in Annex 1 of the TDRA Internet Access Regulations. Annex 1 outlines various lists of prohibited internet content in the UAE.
Clause 1: Bypassing and Accessing Blocked Content
This category includes internet content that enables or assists users in accessing prohibited content, including proxy servers and VPN services designed primarily to bypass restrictions on the internet.
Clause 14: Illegal Communication Services
This category covers internet content that promotes or allows access to illegal communication services, as determined by the relevant authorities.
Thus, while VPNs are not outright banned in the UAE, they should not be used to access or bypass blocked or prohibited content. VPN services facilitating such access are classified as prohibited content and are regulated accordingly. However, there is no specific list of approved VPNs. For further clarification, consulting a legal practitioner in the UAE or the TDRA is advisable.
