The Artificial Intelligence and Data Authority is a new federal body covering the whole UAE, not just Dubai. Sheikh Mohammed bin Rashid approved it on 14 June 2026, and it reports directly to the UAE Cabinet. It brings three existing bodies together: the UAE AI Office, the UAE Data Office and the digital government sector of the Telecommunications and Digital Government Regulatory Authority (TDRA). Omar Sultan Al Olama, the Minister of State for Artificial Intelligence, chairs it.
For AI startups, the authority mainly changes who sets the rules for government data, AI standards and digital services. It doesn't yet create new rules for private companies. Here's what it controls, what it doesn't, and what founders should watch.
By the Dubai Tech Insider Editorial Team · Published 23 October 2026 · Last updated and verified 23 October 2026.
UAE AI and Data Authority: Key Facts at a Glance
| Item | Detail |
|---|---|
| Official name | Artificial Intelligence and Data Authority |
| Approved | 14 June 2026, by Sheikh Mohammed bin Rashid Al Maktoum |
| Level | Federal (UAE-wide) |
| Reports to | The UAE Cabinet |
| Chairman | Omar Sultan Al Olama, Minister of State for Artificial Intelligence |
| Merges | The AI Office, the UAE Data Office and TDRA's digital government sector |
| Main role | The single national body for data, AI and digital government |
| Legal instrument | Not named in the official announcement |
| Start of operations | No timeline published |
The details come from the UAE Cabinet announcement and the Dubai Media Office release of 14 June 2026.
Which Bodies the AI and Data Authority Replaces
The authority takes over the functions of three bodies. Each had a different job before:
| Body | What It Did Before | Where It Sat |
|---|---|---|
| Office of Artificial Intelligence, Digital Economy and Remote Work Applications | Led the UAE's AI strategy and digital economy policy | Under the Minister of State for AI |
| UAE Data Office | Set up in 2021 as the onshore regulator for the personal data protection law (PDPL) | Federal |
| Digital Government Sector | Ran federal digital government services | Inside TDRA |
The UAE Data Office was created by Federal Decree-Law No. 44 of 2021 to enforce the PDPL. That's the part of the merger with the clearest link to private companies, covered below.
TDRA itself continues. Only its digital government sector moves to the new authority. The announcement doesn't change TDRA's telecoms role.
What the Authority Controls: Its Responsibilities
The Cabinet listed the authority's responsibilities. Here's what each means in practice:
| Responsibility | What It Means for Startups |
|---|---|
| Lead the national AI strategy | One body now sets AI direction for the country |
| Propose national policies, legislation and strategies | Any future AI or data law is likely to start here |
| Set standards for data, AI, digital transformation and government services, and ensure federal entities comply | Suppliers to federal entities may have to meet these standards |
| Manage government data and its sharing across federal entities | Clearer rules on how government data is used and shared |
| Run AI-powered national data platforms | A new buyer and platform owner for government AI work |
| Design proactive, integrated digital government services built on agentic AI | Demand for agentic AI in government services |
| Build national AI capability through research, development and technical advisory | Possible partnerships and advisory work |
| Grow the digital economy's share of GDP | A mandate that includes private-sector growth |
| Coordinate internationally and support government cybersecurity | Security requirements for government suppliers |
Most of these responsibilities point at government. The authority checks that federal entities comply. It doesn't have a published mandate to license or inspect private AI companies.
Does the AI and Data Authority Regulate Private Companies?
Not directly, based on what has been published. The official announcement describes compliance only "across federal entities". It doesn't mention licensing, penalties or new obligations for private companies.
There are two indirect effects:
- If you sell to government, the authority's standards for data, AI and digital services are likely to shape what federal buyers ask suppliers for.
- If you process personal data, the UAE Data Office was the PDPL regulator, and it's now part of the authority. The official announcement doesn't say how PDPL enforcement will work after the merger.
Law firm ABS Partners lists the same open questions: the legal instrument, the effective date, whether the authority has binding powers over private companies, and the PDPL's future relationship with it.
Who Regulates What: Federal, Dubai and DIFC
The authority is federal, but Dubai has its own bodies, and DIFC has its own laws. Which rules apply depends on where your company is licensed and what you do.
| Area | Who's Responsible |
|---|---|
| National AI strategy and federal digital government | Artificial Intelligence and Data Authority |
| Personal data in onshore and most free zone companies | PDPL; its regulator, the UAE Data Office, is now part of the authority |
| Personal data in DIFC companies | DIFC's own Data Protection Law (DIFC Law No. 5 of 2020) |
| Personal data in ADGM companies | ADGM's Data Protection Regulations 2021 |
| Dubai government's own AI and digital programmes | Dubai bodies, such as the Dubai Centre for Artificial Intelligence |
How the Authority Fits the UAE's 2026 AI Push
The authority was the third major AI move by the federal and Dubai governments in under two months:
| Date | What Happened |
|---|---|
| 24 April 2026 | The UAE Cabinet set a target to deploy agentic AI across 50% of federal entities within two years |
| 4 May 2026 | Dubai launched its two-year private-sector agentic AI plan |
| 14 June 2026 | The Artificial Intelligence and Data Authority was approved |
Its mandate includes a unified digital government system built on agentic AI, which fits the April target. Sheikh Mohammed said the UAE is "building the government of the future. A government that runs on data and agentic AI." Our explainer on Dubai's agentic AI plan covers the private-sector side.
What the AI and Data Authority Means for AI Startups
- If you sell to government: this is the biggest change. One authority now sets standards and runs national data platforms. Expect federal buyers to align their AI and data requirements with its guidance. Build audit logs, data security and clear data handling into your product early. For a route into government pilots, see Dubai Future Accelerators.
- If you process personal data: keep complying with the PDPL, or DIFC or ADGM rules if you're licensed there. Nothing published so far changes these obligations. Watch for guidance on PDPL enforcement after the merger.
- If you build AI for private companies only: little changes for now. The authority's published mandate is mostly about government. But it can propose national legislation, so it's the body to watch for future AI rules.
- If you're outside the UAE and planning to enter: the UAE now has one federal point of contact for AI policy. That makes national AI direction easier to follow, though Dubai and the financial free zones still run their own programmes.
What We Still Don't Know
- The law or decree that formally creates the authority
- When it becomes fully operational, and how staff and functions transfer
- Whether it gets any binding powers over private companies
- How PDPL enforcement works after the UAE Data Office merges into it
- Whether it will publish AI rules or guidance aimed at businesses
We'll update this guide as these details are published.
Common Mistakes
- Calling it a Dubai authority. It's federal and covers all seven emirates.
- Assuming it now licenses AI companies. Nothing published gives it that role. AI licences still come from free zones such as DIFC or from mainland authorities.
- Pausing PDPL compliance. The regulator has moved, but the law still applies.
- Ignoring it because you don't sell to government. It can propose national legislation, so future AI rules are likely to start here.
Frequently Asked Questions
What is the UAE Artificial Intelligence and Data Authority?
A federal body approved on 14 June 2026 as the single national authority for data, AI and digital government in the UAE. It reports to the UAE Cabinet.
Who leads the AI and Data Authority?
Omar Sultan Al Olama, the UAE Minister of State for Artificial Intelligence, is its chairman.
Which bodies does it replace?
It merges the functions of the Office of Artificial Intelligence, Digital Economy and Remote Work Applications, the UAE Data Office, and the digital government sector of TDRA.
Is it a Dubai or a federal body?
Federal. It covers the whole UAE, although it was announced by the Dubai Media Office as well as the UAE Cabinet.
Does the authority regulate private companies?
Not directly, based on what has been published. Its compliance role covers federal entities. Its future powers over private companies haven't been set out.
What happens to the UAE Data Office?
Its functions move into the new authority. The UAE Data Office was the regulator for the PDPL, and the announcement doesn't yet say how PDPL enforcement will work after the merger.
Does the UAE have an AI law?
The announcement doesn't mention a new AI law. The authority is responsible for proposing national policies, legislation and strategies, so any future AI law is likely to start there.
What should AI startups do now?
Keep complying with existing data protection rules, build strong data handling into your product, and watch for the authority's first standards and guidance, especially if you sell to government.
Your Next Step
If your startup sells or plans to sell AI to government, read the authority's standards as soon as they're published, and design your product to meet them. If you're licensed in DIFC, your data protection rules haven't changed. If you're still choosing where to set up, start with Dubai Founders HQ, which guides founders through setup and licensing options.
