Online Defamation Takedown Request (UAE)

An Online Defamation Takedown Request in the United Arab Emirates is a formal legal notice demanding that a digital platform, website, or publisher immediately remove content that defames, violates the privacy of, or unlawfully publishes personal information about a named individual. The UAE has among the most complete and actively enforced digital content protection laws in the world, making a properly drafted takedown request a powerful first step in asserting legal rights against harmful online content — and a prerequisite before escalating to criminal or civil enforcement.

The primary statute governing online defamation and privacy violations in the UAE is the Cybercrime Law (Federal Decree-Law No. 34 of 2021), which replaced the earlier Federal Law No. 5 of 2012 on Combating Cybercrimes and significantly expanded its scope. Article 43 of the Cybercrime Law criminalises the use of any information technology — including social media, websites, messaging applications, and email — to defame, insult, damage the reputation of, or cause harm to the honour and dignity of another person. Article 44 specifically prohibits publishing, re-publishing, or distributing audio recordings, photographs, or videos of a person without their consent. Penalties under these provisions include fines ranging from AED 150,000 to AED 2,000,000 and imprisonment terms that courts in Dubai, Abu Dhabi, and other emirates have applied in practice.

The UAE Civil Code (Federal Law No. 5 of 1985) provides a parallel civil remedy through Articles 282 to 288, which establish the general tort of harm (darara): any person who causes harm to another through a wrongful act — including publishing false, defamatory, or privacy-violating information — must compensate the injured party for all losses, including financial loss and reputational damage. Civil claims for defamation are regularly heard by the Dubai Courts (Court of First Instance), the Abu Dhabi Judicial Department, and the DIFC Courts (for DIFC-related entities), and damages awards in significant cases have run to hundreds of thousands of AED.

The Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) adds a data protection dimension: where defamatory or harmful content includes the victim's personal data — name, photograph, contact details, location, or other identifying information — the publication constitutes unlawful processing of personal data under Article 11 of the PDPL, exposing the publisher to administrative penalties enforced by the UAE Data Office in addition to criminal and civil liability.

The Telecommunications and Digital Government Regulatory Authority (TDRA) is the UAE's digital content regulator and has the power to order platforms to remove content that violates UAE law. The TDRA operates a reporting mechanism for online content violations, and a formal takedown request supported by the legal basis cited above strengthens any complaint filed with the TDRA.

For individuals in Dubai, Abu Dhabi, Sharjah, and across the UAE who are targeted by false accusations, privacy violations, non-consensual image publication ('revenge porn'), harassment campaigns, and other forms of digital harm, the forms-legal.com UAE Online Defamation Takedown Request template provides a professionally structured, legally grounded first notice that must precede any formal enforcement action.

An Online Defamation Takedown Request in the United Arab Emirates is needed as the first formal response to any of the following situations involving harmful online content.

False statements of fact about a private individual constitute classic defamation under Article 43 of the Cybercrime Law (Federal Decree-Law No. 34 of 2021). In the UAE's business community — particularly in sectors such as real estate brokerage, financial advisory, professional services, and hospitality — false allegations of fraud, dishonesty, or professional misconduct posted on social media or consumer review platforms can cause serious financial damage within a tight-knit commercial community. A takedown request compels the platform or publisher to remove the false content before the harm compounds.

Non-consensual publication of photographs or videos — sometimes called 'image-based abuse' or 'revenge porn' — is criminalised by Article 44 of the Cybercrime Law. In the UAE, this offence is treated with particular seriousness. The Dubai Police cybercrime unit and the Abu Dhabi Police cybercrime section actively prosecute these cases. A formal takedown request documents the demand for removal and the platform's response or failure to respond, creating an evidential record for subsequent criminal complaint.

Privacy violations involving published personal data — such as someone's home address, mobile number, workplace, or family details being published without consent — are actionable under both the Cybercrime Law and the Personal Data Protection Law (Federal Decree-Law No. 45 of 2021). The TDRA and the UAE Data Office both receive complaints about unlawful publication of personal data, and a formal written demand to the platform is the standard first step.

Harassment campaigns, coordinated trolling, and sustained attacks on an individual's digital presence — common in high-profile business disputes in Dubai and Abu Dhabi — typically involve multiple posts and accounts. A formal takedown request to the platform establishes the legal grounds for the content's removal and can be accompanied by a complaint to the TDRA seeking platform-level enforcement.

Reputation management following false consumer reviews, false competitor allegations, and disinformation campaigns affecting a UAE-based professional or business requires a combination of platform takedown requests and potential referral to the Dubai Economy and Tourism (DET) consumer protection function or the relevant trade licensing authority.

Content dating from before the UAE PDPL came into force — for example, old social media posts containing personal data that the subject now wishes removed — may also be the subject of a takedown request, based on the current PDPL right to erasure combined with the Cybercrime Law framework.

An effective Online Defamation Takedown Request for the United Arab Emirates must contain all of the following elements to be treated as a formal legal notice by a platform's legal or trust and safety team. The forms-legal.com UAE Online Defamation Takedown Request template addresses each of these requirements.

Identification of the claimant: the full legal name, Emirates ID or passport number, and contact details of the person whose rights have been violated. Platforms require this information to verify that the request is coming from the affected individual (or their authorised representative) and not a third party. Anonymous takedown requests are rarely actioned by major platforms.

Identification of the platform and publisher: the full name of the platform or website hosting the content, the platform's abuse or legal reporting contact address, and the name or account handle of the person or entity that published the content. Where the publisher's identity is unknown, stating this fact and requesting that the platform preserve all identity-related records is essential for any subsequent criminal or civil proceeding.

Specific content identification: the complete URL(s) of the defamatory or harmful content, the date of publication, and a description of the content sufficient to identify it without ambiguity. Screenshots and preserved copies of the content should accompany the request, as platforms may claim the content has been removed or does not exist if only a URL is provided.

Statutory basis: explicit citations to Article 43 of the UAE Cybercrime Law (Federal Decree-Law No. 34 of 2021) for defamation by information technology, Article 44 for non-consensual image publication, and/or Articles 282 to 288 of the UAE Civil Code (Federal Law No. 5 of 1985) for civil harm. Citing the statute demonstrates that the request is a formal legal demand under UAE law, not merely a personal complaint.

Description of harm: a clear statement of the specific harm caused — reputational damage, professional loss, emotional distress, privacy violation — and the professional or personal capacity in which the claimant has been harmed.

Formal demand: a clear list of what actions the platform must take, with a specific deadline (typically 24-48 hours for criminal-law violations). The demand should include content removal, prevention of re-publication, preservation of publisher identity records, and written confirmation of compliance.

Consequences of non-compliance: a statement that failure to comply will result in a criminal complaint to the UAE Cybercrime Investigation Unit, a complaint to the TDRA, and/or civil proceedings before the competent UAE court. Major platforms' legal and trust and safety teams are familiar with UAE enforcement mechanisms and are more likely to act promptly when a credible escalation path is clearly stated.

Completing an Online Defamation Takedown Request for use in the UAE requires careful documentation of the harmful content and a clear statement of the legal grounds for removal.

Step one: enter your full legal name as it appears on your Emirates ID or passport. If you are acting as a representative of a company whose reputation has been harmed, enter the company's full registered name and your personal details as the authorised representative.

Step two: enter your contact email address and phone number. The platform's legal or trust and safety team will use these to correspond about the request. Some platforms require two-factor verification for takedown requests.

Step three: enter the date of the request in DD/MM/YYYY format. The date establishes when the formal notice was delivered to the platform, which is the starting point for the 48-hour deadline and for any subsequent evidence of non-compliance.

Step four: identify the platform by its full name — Instagram, YouTube, TikTok, a specific UAE news website — and the contact address for legal notices. Major platforms publish legal contact addresses in their terms of service or through specific reporting tools (Instagram's copyright or privacy reporting flows, YouTube's legal notices form, TikTok's law enforcement request portal). Using the correct reporting channel accelerates review by the platform's legal team rather than the general support team.

Step five: enter the URL of each item of defamatory or harmful content. Copy the exact URL from your browser address bar. If the content exists in multiple locations — for example, a post and a story on the same account, or the same content cross-posted to multiple platforms — list every URL. Do not rely on the platform discovering related content; identify each item specifically.

Step six: describe the content and why it is defamatory or harmful. Be factual and specific. State: what the content says or shows, why it is false or privacy-violating, when it was published, and what professional or personal harm it has caused. Avoid emotional language; the most effective takedown requests read as objective, factual legal notices.

Step seven: select the type of harmful content from the dropdown. This determines which provision of the UAE Cybercrime Law is most directly applicable. For false statements of fact, cite Article 43. For non-consensual images or recordings, cite Article 44. For published personal data, also cite the Personal Data Protection Law (Federal Decree-Law No. 45 of 2021).

Step eight: sign the request electronically or by hand and send it to the platform's legal contact email, with screenshots or a screen recording of the content attached. Send a copy to yourself as a record of delivery. Follow up within 48 hours if no acknowledgment is received.

Online defamation and privacy violations in the United Arab Emirates are governed by an interlocking set of statutes that provide both criminal and civil remedies.

The UAE Cybercrime Law (Federal Decree-Law No. 34 of 2021) is the primary instrument for online defamation. Article 43 makes it a criminal offence to use information technology to insult, defame, or damage the reputation, dignity, or honour of another person. Article 44 specifically criminalises the publication, re-publication, or distribution of audio recordings, photographs, or videos of a person without their consent, even if those materials were originally taken in a public or semi-public place. Penalties under Article 43 include fines of up to AED 2,000,000 and imprisonment; under Article 44, fines of up to AED 2,000,000 and imprisonment are also prescribed. Courts in Dubai and Abu Dhabi have applied these penalties in practice.

The UAE Civil Code (Federal Law No. 5 of 1985), Articles 282 to 288, provides the framework for civil claims. Article 282 states that every harm (darara) caused to another person by a wrongful act creates an obligation to make good the harm. The publication of false defamatory content, the disclosure of private information, and the non-consensual publication of images all constitute wrongful acts giving rise to civil liability. The Dubai Courts and the Abu Dhabi Judicial Department have jurisdiction over civil defamation claims; the DIFC Courts have jurisdiction where both parties are DIFC-registered or have agreed to DIFC jurisdiction.

The Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) applies where the defamatory or harmful content includes personal data. The UAE Data Office can order the removal of personal data published without a lawful basis and can impose administrative penalties on the publisher or platform.

The Federal Decree-Law No. 31 of 2021 on Combatting Rumours and Fake News also applies to false information published online, particularly false statements that could harm public order, undermine financial markets, or affect national security.

Proof requirements: for a criminal complaint to be actionable, the claimant must provide evidence of the publication — URLs, screenshots, and preserved copies of the content — together with their identity documents and a description of the harm. For a civil claim, the same evidence is needed plus a quantification of damages. The claimant must also demonstrate that the defamatory content is false (for claims based on Article 43) or that consent was not given (for claims under Article 44).

Online defamation takedown requests in the UAE frequently fail or are delayed because of these common errors.

The first mistake is using a platform's general report button rather than sending a formal legal notice. General abuse reports are typically reviewed by automated systems or low-level content moderators who apply community standards rather than UAE law. A formal legal notice citing the UAE Cybercrime Law (Federal Decree-Law No. 34 of 2021) and sent to the platform's legal team is far more likely to result in rapid action.

The second mistake is not preserving the content before sending the takedown request. After receiving a takedown notice, platforms often remove content quickly, but some publishers may also delete content proactively when they become aware of legal action, destroying evidence for potential criminal or civil proceedings. Always take screenshots, screen recordings, and page archives before sending any takedown notice. Tools like the Wayback Machine and manual PDF print-to-file are useful for preserving web content.

The third mistake is setting an unrealistic or open-ended deadline. A takedown request that says 'please remove as soon as possible' gives the platform discretion to take weeks to respond. A specific 48-hour deadline for criminally prohibited content — consistent with the urgent nature of Cybercrime Law violations — creates a clear non-compliance record if the platform fails to act in time.

The fourth mistake is not requesting preservation of publisher identity records. Criminal investigation of the publisher requires the platform to disclose the publisher's account details, IP address logs, and upload records to law enforcement. A takedown notice that does not include a preservation request risks having this evidence deleted as part of the platform's routine data purge.

The fifth mistake is failing to report to multiple authorities simultaneously. The UAE enforcement framework for online defamation involves the platform (for content removal), the TDRA (for digital platform compliance), the UAE Data Office (for personal data violations), and the police cybercrime unit (for criminal prosecution). Sending formal notices to all relevant authorities on the same day creates maximum pressure for prompt action.