What the creation of the UAE’s new Artificial Intelligence and Data Authority means for businesses, digital governance and regulatory accountability.
On 14 June 2026, the United Arab Emirates announced the establishment of the Artificial Intelligence and Data Authority (the “Authority”), a single federal body responsible for artificial intelligence, data governance and digital government. Reporting directly to the UAE Cabinet and chaired by Omar Sultan Al Olama, Minister of State for Artificial Intelligence, Digital Economy and Remote Work Applications, the Authority represents a significant milestone in the UAE’s digital transformation.
Rather than introducing an entirely new regulatory concept, the Authority consolidates existing federal functions under one institution, reflecting a deliberate move towards a more coordinated and mature framework for governing artificial intelligence, government data and digital services. For businesses operating in the UAE, the announcement is more than an institutional restructuring. It provides an important indication of the future direction of AI and data regulation.
One Authority, One National Framework
The Authority brings together responsibilities previously exercised by three separate bodies: the Office of Artificial Intelligence, Digital Economy and Remote Work Applications, the Digital Government Sector of the Telecommunications and Digital Government Regulatory Authority (TDRA), and the UAE Data Office.
This consolidation is significant because it centralises responsibility for developing national AI policy, coordinating digital government initiatives and managing federal data governance. It also reduces regulatory fragmentation and provides a clearer institutional framework through which future legislation, standards and guidance may be developed.
The Authority’s mandate includes proposing national strategies and legislation, developing AI policy, managing government data, establishing standards for AI and digital transformation, promoting compliance across federal entities and supporting research and technical capability. It will also oversee AI-powered national data platforms designed to support evidence-based government decision-making and the delivery of more integrated public services.
Who Watches the Watchers?
The establishment of a single authority responsible for artificial intelligence and government data inevitably raises an important legal question: who oversees the regulator itself?
The answer lies not in creating another regulator, but in the broader framework of UAE public law. The Authority reports directly to the UAE Cabinet and will exercise only those powers conferred upon it through legislation and executive decisions. Like other public authorities, it is expected to operate within established principles of legality, administrative accountability and good governance.
As the Authority’s role evolves, businesses will naturally seek clarity regarding consultation processes, published guidance, regulatory expectations and the consistency of administrative decision-making. Predictability and transparency are fundamental characteristics of mature regulatory systems and are essential to maintaining investor confidence.
In this respect, effective AI governance is not simply about regulating technology. It is equally about ensuring that the institutions entrusted with regulating technology remain transparent, accountable and subject to appropriate governmental oversight.
AI Governance Comes into Focus
The UAE has already established itself as one of the region’s leaders in artificial intelligence through initiatives such as the National Strategy for Artificial Intelligence 2031 and the appointment of the world’s first Minister of State for Artificial Intelligence.
Unlike jurisdictions such as the European Union, however, the UAE has not yet enacted a standalone AI law. Instead, AI-related activities are currently regulated through a combination of existing legislation, including the Cybercrime Law, the Penal Code, the Civil Transactions Law and applicable data protection laws.
The creation of the Authority suggests that the UAE is moving towards a more structured governance framework. Whether this ultimately results in comprehensive AI legislation, sector-specific regulations, mandatory governance standards or regulator-issued guidance remains to be seen. What is already clear is that artificial intelligence and data governance are now being treated as interconnected issues requiring coordinated oversight.
Implications for Data Protection
Federal data protection continues to be governed principally by Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL).
Although the PDPL came into force in January 2022, its long-awaited Executive Regulations have yet to be issued. As a result, businesses continue to interpret several practical compliance obligations without the benefit of detailed regulatory guidance.
By incorporating the former UAE Data Office into the Authority, the government has created a more coherent institutional framework for future implementation of the PDPL. While this does not automatically resolve outstanding regulatory questions, it increases the likelihood of greater consistency in the development of data governance policies and practical compliance expectations.
Businesses operating within the Dubai International Financial Centre (DIFC) and Abu Dhabi Global Market (ADGM) will, of course, continue to comply with the separate data protection regimes applicable within those jurisdictions. Nevertheless, the emergence of a stronger federal institution may encourage greater coordination between the UAE’s various data protection frameworks over time.
Practical Implications for Businesses
For organisations operating in the UAE, the Authority’s establishment should be viewed as an opportunity to strengthen governance before additional regulatory requirements emerge.
Businesses should consider:
- reviewing data governance frameworks and records of processing activities;
- conducting an inventory of AI systems currently used across the organisation;
- implementing internal AI governance policies addressing accountability, oversight and risk management;
- reviewing contracts with AI vendors and technology providers to ensure appropriate data protection, cybersecurity and audit provisions; and
- monitoring future guidance, standards and legislative developments issued by the Authority.
Organisations that proactively strengthen governance now are likely to be better positioned as the UAE’s regulatory landscape continues to evolve.
Looking Ahead
The establishment of the Artificial Intelligence and Data Authority represents considerably more than an administrative restructuring. It demonstrates the UAE’s intention to consolidate artificial intelligence, data governance and digital government within a single institutional framework capable of supporting the country’s long-term digital economy ambitions.
For businesses, the practical implications extend beyond future compliance obligations. Organisations that invest in sound governance, responsible AI practices and effective data management today will be better positioned to adapt as the Authority’s mandate develops and the regulatory framework becomes more sophisticated.
So, who watches the watchers?
Ultimately, the Authority itself operates within the UAE’s broader constitutional and administrative framework. It derives its powers from legislation, reports directly to the Cabinet and remains accountable through the legal and institutional structures that govern public authorities in the UAE. As its role develops, transparency, clear procedures, consultation and consistent decision-making will be essential to maintaining public confidence and reinforcing the UAE’s position as a trusted global centre for digital innovation.
In the field of artificial intelligence, effective regulation is not achieved merely by creating a regulator. It is achieved by ensuring that the regulator itself exercises its powers transparently, proportionately and within a clear legal framework. In that sense, the UAE’s newest Authority is not simply the country’s AI watchdog, it is itself subject to the rule of law, institutional accountability and the principles of good governance. That, ultimately, is who watches the watcher.
If you have any questions or need further advice on related matters, please feel free to contact Tareq Al Shamsi : tareq.alshamsi@sat-law.com
Written by Tareq Al Shamsi
August 5 , 2026
