Regulationsby GlyphUAE Child Digital Safety Law
In force United Arab Emirates · In force Jan 1, 2026 · next deadline Jan 1, 2027 (in 2 months)
Deadlines
Coming up
Compliance deadline under the Decree by LawArticle 18: those covered must comply within one year from entry into force. The Cabinet may extend this.
Social media platforms' transition endsArticle 8 of Cabinet Resolution No. 106 of 2026 gives platforms 12 months from entry into force to comply.
Already passed
Social media minimum age resolution takes effectCabinet Resolution No. 106 of 2026 applies from the day after publication in Official Gazette No. 826 on 29 June 2026.
Child Digital Safety Law takes effectEffective date shown on the official legislation portal. Published in Official Gazette No. 809 (supplement 1) on 14 October 2025.
Summaries for reference, not legal advice. Check the official text.
What it does
Sets child safety duties for internet service providers and digital platforms that operate in or target the UAE, from social media and games to e-commerce. Platforms may not process personal data of children under 13 without verifiable parental consent and must use age verification and risk-based controls. A 2026 Cabinet Resolution bars social media accounts for children under 15 and restricts accounts for 15 year olds.
- Who it applies to
- Internet service providers and digital platforms operating in the UAE or directed at UAE users, including websites, search engines, apps, messaging, gaming, social media, live streaming, podcast, streaming and e-commerce platforms, and child caregivers.
- Penalties
- Administrative penalties are to be set by a Cabinet regulation (Art. 16).
- Enforced by
- Child Digital Safety Council, Ministry of Family and the competent authorities; TDRA for the social media age rules
- Official name
- Federal Decree by Law No. 26 of 2025 Regarding Child Digital Safety
- Citation
- Federal Decree by Law No. (26) of 2025; Cabinet Resolution No. (106) of 2026
- Topics
- Children, Online safety, Privacy
Verified 2026-09-25 uaelegislation.gov.ae
Research notes
The 2027 dates are computed from the one-year and 12-month periods in the texts.
Related
Bahrain PDPLBahrain's general data protection law. It sets lawful bases for processing, stricter rules for sensitive data, individual rights, transfer limits and registration duties, and creates the Personal Data Protection Authority. It carries both administrative and criminal penalties.In effect since Aug 1, 2019Egypt PDPLEgypt's data protection law covers personal data processed electronically. It sets consent and lawful processing rules, strict rules for sensitive data and cross-border transfers, and a licensing and permit system run by the Personal Data Protection Center. The Executive Regulations were only issued in November 2025, which starts a one-year window to comply.Next: Nov 2 One-year compliance window ends · in 6 days
Israel Privacy Protection Law Amendment 13Major overhaul of Israel's privacy law: broadens definitions (personal and highly sensitive information), narrows database registration, requires privacy protection officers for certain entities, and gives the Privacy Protection Authority powers to impose large administrative fines and orders, plus statutory damages.In effect since Aug 14, 2025
Kenya Computer Misuse and Cybercrimes ActKenya's main cybercrime law. It creates offences such as unauthorised access, interference, cyber harassment and false publication, sets up a National Computer and Cybercrimes Co-ordination Committee, and requires critical infrastructure owners to report threatening incidents. The 2025 amendment adds identity theft rules and lets the Committee order websites or apps that promote unlawful activity, child sexual content, terrorism or extremism to be blocked.In effect since May 30, 2018Kenya Data Protection ActKenya's GDPR-inspired data protection law establishing the ODPC, mandatory registration of data controllers and processors, data subject rights, 72-hour breach notification to the Commissioner, DPIAs, and conditions on cross-border transfers (with some data localisation for strategic public interest processing).In effect since Nov 25, 2019
Nigeria NDPANigeria's primary data protection statute, establishing the NDPC, lawful bases, data subject rights, 72-hour breach notification, and special duties for data controllers and processors of major importance (registration, DPO, compliance audits). The GAID 2025 supersedes the NDPR 2019 and its Implementation Framework with detailed rules on audits, DPIAs, transfers and more.In effect since Jun 12, 2023Rwanda DPP LawRwanda's data protection law, modelled on the GDPR. Controllers and processors must register with the supervisory authority, report breaches within 72 hours, and store personal data in Rwanda unless they hold a certificate allowing storage abroad. Cross-border transfers need authorisation or another listed ground.In effect since Oct 15, 2021
Saudi PDPLSaudi Arabia's comprehensive data protection law with implementing regulations and separate transfer regulations: legal bases, data subject rights, breach notification to SDAIA within 72 hours, DPO and registration requirements, and restrictions on transfers outside the Kingdom.In effect since Sep 14, 2023
Questions about UAE Child Digital Safety Law
- What are the UAE Child Digital Safety Law compliance deadlines?
- Jan 1, 2026: Child Digital Safety Law takes effect. Jun 30, 2026: Social media minimum age resolution takes effect. Jan 1, 2027: Compliance deadline under the Decree by Law. Jun 30, 2027: Social media platforms' transition ends.
- When does UAE Child Digital Safety Law take effect?
- UAE Child Digital Safety Law took effect on Jan 1, 2026. The next milestone is Jan 1, 2027: Compliance deadline under the Decree by Law.
- Who does UAE Child Digital Safety Law apply to?
- Internet service providers and digital platforms operating in the UAE or directed at UAE users, including websites, search engines, apps, messaging, gaming, social media, live streaming, podcast, streaming and e-commerce platforms, and child caregivers.
- What are the penalties under UAE Child Digital Safety Law?
- Administrative penalties are to be set by a Cabinet regulation (Art. 16).