UAE Creates Federal Authority for AI and Data
The United Arab Emirates has made one of its most consequential regulatory moves in the technology space. On June 14, 2026, His Highness Sheikh Mohammed bin Rashid Al Maktoum announced the creation of the Federal Authority for Artificial Intelligence and Data, a unified national body that consolidates AI oversight, digital government, and data regulation under a single structure reporting directly to the UAE Cabinet.
The Authority absorbs three existing entities: the UAE Artificial Intelligence Office, the Information and Digital Government Sector within TDRA, and the previously announced Emirates Data Office. This is not a cosmetic restructuring. It represents a deliberate effort to resolve the regulatory fragmentation that had left questions about jurisdiction and enforcement unresolved, particularly around the Personal Data Protection Law (PDPL).
The mandate is broad: setting unified national AI and data policy, proposing legislation, ensuring coherence between federal and local digital initiatives, establishing standards for data and AI management, driving compliance across federal entities, building national R&D capacity, and expanding international AI partnerships. Minister of State for AI Omar Sultan Al Olama will chair the Authority.
For businesses operating on the UAE mainland, the most immediate question is what this means for PDPL enforcement. The implementing regulations, necessary to operationalise key concepts around legal basis, data subject rights, cross-border transfers, and breach notifications, have never been issued. The expectation is that the Authority will take ownership of finalising those regulations. Companies in AI, data processing, and digital infrastructure should monitor how the Authority engages with industry in its formative phase.
This is the UAE doing what it does best: moving fast with institutional architecture. For builders in MENA, the signal is clear — the UAE is serious about creating a single regulatory front door for AI and data. If you're operating on UAE mainland, prepare for PDPL enforcement to finally materialise. The free zones (DIFC, ADGM) already have mature data protection frameworks; mainland businesses should close that compliance gap before the Authority forces them to.
What does the new UAE AI and Data Authority do?
It consolidates AI policy, data governance, and digital government under one federal body reporting to the UAE Cabinet, replacing three previously separate entities.
Will the Authority enforce the PDPL?
The market expects the Authority to take ownership of finalising and enforcing the PDPL's implementing regulations, which have been pending for years.