
an outline of the roles and responsibilities of key stakeholders for the planning, development, implementation and ongoing monitoring and improvement of IA.a risk-based approach for the implementation of the IA.description of how information assurance is achieved at the national, sector and entity levels.In particular, the IA Regulation provides: This includes information in physical or electronic form that may be owned, leased, or otherwise in the possession, custody, or control of the entities. TDRA will designate the critical entities as per the UAE CIIP Policy to implement the IA Regulation and apply its requirements to the use, processing, storage and transmission of information or data, and the systems and processes used for those purposes. The IA Regulation provides management and technical information security controls for entities to establish, implement, maintain, and continuously improve information assurance. The regulation seeks a trusted digital environment throughout the UAE. In light of the rapidly evolving cyber threats, including hacktivists and organised cybercrime groups that challenge national security and compromise critical information assets, Telecommunications and Digital Government Regulatory Authority developed the ‘ UAE Information Assurance Regulation’ to provide requirements to raise the minimum level of protection of information assets and supporting systems across all entities in the UAE. UAE Information Assurance (IA) Regulation Read about other cyber laws and regulations in the UAE. Penalties for incitement of debauchery using computer or IT networks.Penalties of failure to comply with media content standards.Penalties for infringement of data of financial, commercial, economic institutions using IT.Penalties for falsifying electronic document.

Penalties of fake e-mails, websites, online accounts.Penalties of collecting and processing personal data and information.Read these articles from WAM, for more information: advertising information which mislead consumers.offending a foreign country or religion.promoting demonstrations without a licence.conducting statistical surveys without a licence.transferring, possessing and using illegal funds.creating or managing a website for promoting human trafficking.creating illegal content and refraining from removing it.publishing data that does not comply with media content standards.tampering with medical data, bank accounts and confidential codes.creating or modifying robots to distribute false data.The law lists offences and penalties against any person who may create or use an electronic site or any information technology means for hacking, attacking or tampering with government information systems and data, disseminating false information, or information that harms the interest and the security of the UAE. Other cyber offences in the law include: It further seeks to protect the UAE’s government websites and databases, combat the spread of rumours and fake news, safeguard against electronic fraud and maintain privacy and personal rights. It aims to enhance the level of protection from online crimes committed through the use of information technology, networks and platforms. The new law provides a comprehensive legal framework to address the concerns relating to the misuse and abuse of online technologies. It repeals Federal Law 5 of 2012 on Combatting Cybercrimes, as amended. 34 of 2021 on Combatting Rumours and Cybercrimes (available in Arabic only) took effect on 2 January 2022. Law on combatting rumours and cybercrimesįederal Decree Law No.
