Is Sharing Passwords Legal in United Arab Emirates After the 2026 Policy Reforms?

No, sharing passwords in the UAE violates cybersecurity laws unless explicitly authorized under licensed exceptions, as the UAE Penal Code (Article 11) and Federal Decree-Law No. 34 of 2021 criminalize unauthorized access to digital systems. The Telecommunications and Digital Government Regulatory Authority (TDRA) enforces strict penalties, including fines up to AED 1 million and imprisonment for breaches, reflecting the UAE’s 2026 compliance alignment with global cybersecurity frameworks.

Key Regulations for Sharing Passwords in United Arab Emirates

  • Federal Decree-Law No. 34 of 2021 (Cybercrimes Law): Prohibits password sharing under Article 11, classifying it as unauthorized access to electronic systems, punishable by imprisonment and fines up to AED 1 million.
  • UAE Penal Code (Article 11): Extends criminal liability to individuals facilitating unauthorized access, including employees sharing credentials, with penalties escalating for corporate entities.
  • TDRA Compliance Mandates: Requires licensed entities to implement multi-factor authentication (MFA) and prohibits password reuse across systems, with audits enforcing adherence to 2026 cybersecurity standards.

The UAE’s regulatory framework prioritizes data sovereignty, with the TDRA’s 2024–2026 National Cybersecurity Strategy explicitly targeting password-sharing risks in critical infrastructure sectors. Exceptions exist for government-approved entities under controlled environments, but private sharing remains unlawful without formal authorization.