Data center rules in United Arab Emirates

On 10 July 2026 the US Bureau of Industry and Security (BIS) moved the UAE into Country Group A, subgroup 5. This makes UAE buyers eligible for a licence exception called Strategic Trade Authorization. The UAE was also removed from two groups of countries of concern for chemical, biological and missile items.

The same rule created a list of approved end users in Supplement No. 8 to Part 740 of US export rules. It names UAE government bodies, G42 and Core42, and eight US companies including Microsoft, Google, Amazon, Oracle and OpenAI. Listed parties can receive advanced computing items without a separate export licence.

The Abu Dhabi Investment Office (ADIO) runs the Musataha programme, which gives companies long-term leases over government-owned land. Khazna used it in 2024 for a 30 MW data centre in Mafraq. ADIO said it had signed 132 such agreements since October 2021.

The Dubai Integrated Economic Zones Authority (DIEZ) runs free zones including Dubai Silicon Oasis. In May 2026 it formed a joint venture with Volt UAE for a data centre campus there. DIEZ provides land and base infrastructure and Volt builds, finances and operates the site.

The Telecommunications and Digital Government Regulatory Authority (TDRA) renewed the licences of e& and du from 9 August 2026 to 8 August 2046. The new licences add duties on network resilience, backup capacity and international connectivity. These two carriers supply most connectivity to UAE data centres.

DEWA charges industrial users AED 0.230 per kWh for the first 10,000 kWh each month and AED 0.380 above that. A large data centre pays almost all its power at the upper rate. The slabs come from a 2011 Dubai Executive Council resolution.

DEWA adds a fuel surcharge that it resets each month. For October 2026 it is AED 0.060 per kWh. With 5% VAT the upper band costs about AED 0.462, or about US$0.126 per kWh.

In Abu Dhabi, industrial users above 1 MW pay 27 fils per kWh off-peak, about US$0.074. The peak rate is 36.6 fils from 10am to 10pm between 1 June and 30 September. Users of 1 MW or less pay a flat 28.6 fils.

The Abu Dhabi Department of Energy said in January 2026 that it is designing a dedicated electricity tariff for data centres. It wants prices that compete globally while covering the real cost of supply. Operators may be able to choose their energy mix, including renewables. No rates had been published by 3 October 2026.

Federal corporate tax is 0% on taxable income up to AED 375,000 and 9% above it. It applies to financial years starting on or after 1 June 2023.

A company in a free zone that meets the conditions of a Qualifying Free Zone Person pays 0% corporate tax on its qualifying income. Other income is taxed at 9%.

In April 2026 DIEZ froze rents on renewal and waived or deferred several licence fees in Dubai Silicon Oasis, Dubai Airport Freezone and Dubai CommerCity. It linked the relief to the regional situation. None of the measures targets data centres alone.

Federal Decree-Law No. 45 of 2021, the Personal Data Protection Law (PDPL), took effect on 2 January 2022. It requires consent for most processing and limits transfers of personal data abroad. It does not apply inside the DIFC and ADGM financial free zones, which have their own laws.

The executive regulations that set out penalties and transfer details for the PDPL had not been issued as of March 2026. Firms get six months to comply once they are published.

On 14 June 2026 the UAE created the Artificial Intelligence and Data Authority. It merges the UAE Data Office, the digital government arm of TDRA and the AI office, and reports to the Cabinet. It sets national data standards and proposes data laws.

Federal Law No. 2 of 2019 bars storing or processing health information outside the UAE. A health authority decision can allow exceptions.

The UAE Cyber Security Council issued a National Cloud Security Policy on 6 February 2023. In May 2026 du's National Hypercloud became the first sovereign cloud certified under it. The certificate covers all government workloads except those classed Secret and Top Secret.

The DIFC applies its own Data Protection Law No. 5 of 2020. July 2025 amendments let people sue directly in DIFC courts. ADGM added rules in September 2025 on processing sensitive data without consent in some cases.

The Abu Dhabi Department of Energy policy on water in district cooling plants lets operators use recycled water, desalinated water or seawater. The choice depends on cost and feasibility. District cooling used about 5% of the emirate's desalinated water when the policy launched.

Industrial users in Abu Dhabi pay AED 7.84 per cubic metre for water. Recycled water costs AED 1.70 per cubic metre.

The approval for G42 and Core42 to receive US chips without a licence expires on 6 April 2027 unless BIS says otherwise. If they have not become US companies by then, they must apply for authorisation.

Bloomberg reported on 4 September 2026 that G42 is exploring majority US ownership to keep its access to US AI chips. No deal had been announced by 3 October 2026.

Reuters reported on 11 September 2026 that the UAE is revising the 5 GW Stargate UAE campus after Iranian strikes. Sources said it may become a network of hardened sites, some underground. The strikes hit AWS data centres in the UAE in March 2026.

Rates for the planned Abu Dhabi data centre tariff are still unpublished. Their level will set the cost gap with Dubai's roughly US$0.126 per kWh.

The new AI and Data Authority took over the UAE Data Office in June 2026. Its creation could move the long-delayed PDPL executive regulations forward. No date has been set.