TRW & Co · Competition and consumer
E-Commerce and Digital Platform Rules in the UAE
E-commerce law UAE sellers must follow centres on Federal Decree-Law No. 14 of 2023 on Trading by Modern Technological Means, now enforced through a graduated penalty schedule in force since 28 November 2025. Add consumer protection, data, fraud and advertising rules, and online sellers need secure checkouts, clear pricing, invoices, fair returns and a working complaints channel.
Key pointMost penalties in the schedule start with a written warning and fifteen days to fix the problem, so a fast, documented remediation process is worth more than a perfect policy nobody follows.
At a glance
Core statute
Federal Decree-Law No. 14 of 2023 on Trading by Modern Technological Means covers websites, apps, marketplaces, social media and blockchain platforms, including trade received from abroad.
Penalties since 2025
Cabinet Resolution No. 200 of 2025, in force since 28 November 2025, sets graduated penalties from written warnings to fines, temporary closure and permanent closure.
Checkout is the target
Key violations cover identity and contract security, hidden fees, missing invoices, blocked returns and absent complaints mechanisms, all visible in checkout design.
Consumer law overlaps
Federal Law No. 15 of 2020 and its 2023 Executive Regulations add Arabic invoices, price clarity and a ban on harmful terms for online traders.
Thirty-day grievance
A penalty decision can be challenged by a reasoned grievance to the Ministry within 30 days of notification; late grievances are inadmissible.
Swipe or scroll →
The short answer: which rules govern online selling
E-commerce law UAE businesses must comply with is not one statute but a stack. At its centre is Federal Decree-Law No. 14 of 2023 on Trading by Modern Technological Means, often called the Digital Commerce Law. Since 28 November 2025 it has had teeth: Cabinet Resolution No. 200 of 2025 sets a schedule of violations and graduated penalties, from written warnings to fines and closure of a platform.
Around that core sit the consumer protection law and its 2023 Executive Regulations, the personal data protection law, the commercial fraud law, advertising and media rules, payment regulation and, for platforms used by children, the child digital safety law. Each applies to online sellers in a different way.
The practical answer for a founder or general counsel is this: if you sell goods or services to people in the UAE through a website, app, marketplace or social media shop, assume the Digital Commerce Law applies to you, audit your checkout and terms against it, and fix the items in the penalty schedule first. This article explains how.
The legal framework for e-commerce law UAE compliance
The Digital Commerce Law
Federal Decree-Law No. 14 of 2023 covers "trading by modern technological means". The definition is broad: websites, platforms, mobile applications, social media, virtual-reality platforms and blockchain-based platforms. It also reaches activity received from outside the UAE, together with related logistics services and digital payment gateways. A foreign brand selling into the UAE through its own site should not assume it is outside scope.
The law sets baseline standards: a secure technical environment for identity verification and contract formation, clear terms and sale stages, non-paper invoices, a complaints mechanism, return and exchange rights, licensed logistics, and limits on extra fees for paying digitally. Commentators have also noted a restriction on forcing consumers into arbitration for lower-value transactions.
The 2025 penalty schedule
The Digital Commerce Law itself contained no penalties; it left them to a Cabinet decision. Cabinet Resolution No. 200 of 2025 filled that gap and came into force on 28 November 2025. It sets out a schedule of violation categories with penalties that escalate over four stages of repetition. A first breach often attracts a written warning with fifteen days to rectify; repeat breaches move to fines, temporary closure and, at the top, permanent closure. The Ministry can skip the warning stage for serious violations.
Consumer protection, data and fraud
Federal Law No. 15 of 2020 on Consumer Protection and its Executive Regulations, issued by Cabinet Decision No. 66 of 2023, apply to online and offline sales alike. They require Arabic invoices and key information, accurate descriptions, clear prices and fair handling of defects, and they ban "harmful terms". Platform operators that host third-party sellers can be responsible for those sellers' failures. See the Ministry of Economy and Tourism's consumer protection legislation page and our guide to the UAE consumer protection law.
Personal data collected at checkout is governed by Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data, explained in our PDPL guide. Counterfeit or misdescribed goods fall under the commercial fraud regime, which since August 2026 imposes 24-hour recall duties; see our article on the UAE commercial fraud rules.
What the penalty schedule targets
Cabinet Resolution No. 200 of 2025 lists eleven violation categories. The ones below are the most operationally significant for checkout design and back-office processes. The descriptions are a summary; check the current text on the UAE legislation portal before relying on them.
| Violation | First breach | Repeat breaches | Fix |
|---|---|---|---|
| No secure environment to verify digital identity, capacity or offer and acceptance | Fine | Higher fines, up to permanent closure | Robust account verification and explicit order confirmation |
| Unclear terms, sale stages or delivery costs, or departing from declared specifications and timeframes | Written warning, 15 days to rectify | Fines and temporary closure | Show all costs and delivery windows before purchase; keep promises |
| No detailed invoice, paper or electronic | Written warning | Fines and temporary closure | Automatic invoice on every order, with Arabic where required |
| Extra fees for digital payment not declared in the terms | Written warning | Fines and temporary closure | Remove surcharges or disclose them clearly up front |
| Obstructing return or replacement rights | Written warning | Fines and temporary closure | Returns policy that matches the law, not just commercial preference |
| No complaints mechanism | Written warning | Fines and temporary closure | Staffed, trackable complaint channel with published contact details |
The maximum fine in the schedule is reported to be AED 100,000 per violation, and a continuing breach after a warning period is treated as a new violation. Penalties under the consumer protection law are separate and can be higher, so a single bad checkout flow can trigger both regimes.
A penalty decision can be challenged by a reasoned grievance to the Ministry within 30 days of notification, and late grievances are inadmissible. Diarise that window the day a notice arrives, and gather evidence of any remediation before you file.
How e-commerce law UAE enforcement works in practice
The Ministry of Economy and Tourism imposes penalties under the Digital Commerce Law schedule. Each emirate's economic department handles consumer complaints and inspections under the consumer protection law, and those departments often see online problems first. Complaints, test purchases and market monitoring are the usual triggers.
A typical file starts with a consumer complaint about a refund, a delivery delay or an unexpected charge. If the complaint reveals a systemic issue, such as a checkout design that hides fees from every customer, the regulator may treat it as a violation rather than a one-off dispute. That is the point at which e-commerce law UAE compliance stops being a customer service matter and becomes a legal one.
Penalty decisions are notified to the violator, and fines must be paid within a set period. A violation that continues after a warning period ends counts as a new violation, which moves the business up the escalation ladder. Repeat offences are therefore the real risk: a platform that receives two or three warnings in a year for related issues can quickly reach the fine and closure stages.
Keep a compliance log showing each complaint, the root cause and the fix. If a regulator asks questions, a log that shows patterns were spotted and addressed is the best evidence of good faith. It also helps when deciding whether to file a grievance against a penalty under e-commerce law UAE procedures, because it shows what was done and when.
Licensing an online business
The Digital Commerce Law does not replace normal licensing. To trade online from the UAE you need a licence that covers e-commerce activity, issued either by an emirate's economic department on the mainland or by a free zone authority.
- Mainland licence — suits businesses selling directly to UAE consumers and delivering from UAE stock. Dubai's Department of Economy and Tourism and other emirates' departments issue e-commerce and online-trading activities, including home-based options for some applicants.
- Free zone licence — several zones license e-commerce, and Dubai CommerCity is dedicated to digital commerce. A free zone company selling to UAE consumers still needs a compliant route to the onshore market; see our guide to DAFZA, Dubai Silicon Oasis and Dubai CommerCity.
- Foreign seller — a business abroad selling into the UAE may not need a UAE licence for the sale itself, but the Digital Commerce Law can still apply, and VAT and customs rules apply to the goods.
Marketing adds another layer. Paid influencer content and social media advertising are regulated by the UAE Media Council; our guide to the media law and advertiser permits covers the rules. Payment collection may require a licensed payment service provider; see payment services licensing.
Building a compliant platform: step by step
- Confirm scope and licence. Map where you sell, from where you fulfil, and which entity contracts with the customer. Make sure the licence names e-commerce activity.
- Audit the checkout. Walk through every step as a customer. Prices, delivery fees, payment charges and delivery windows must be visible before the order is placed.
- Secure contract formation. Use account verification proportionate to risk and an explicit confirmation step so offer and acceptance are clear and recorded.
- Rewrite terms. Remove unilateral amendment rights, blanket "no returns" statements and one-sided liability caps that the consumer law treats as harmful terms.
- Automate invoices. Issue a detailed electronic invoice for every order, with the Arabic content the consumer law requires.
- Stand up complaints handling. Publish contact details, track each complaint and keep response records.
- Check data and children. Align privacy notices, consent and marketing opt-outs with the PDPL, and assess whether the child digital safety law applies.
- Govern third-party sellers. Marketplaces should onboard sellers with warranties, takedown rights and recall cooperation duties.
Illustrative scenario: a marketplace's first warning
This scenario is illustrative only; the parties are generic.
A regional marketplace licensed in a Dubai free zone hosts several hundred third-party sellers. A consumer complains that a seller added a "card handling fee" at the final payment step, and that the return request was refused under a "no refunds on sale items" policy.
The Ministry issues a written warning for undisclosed digital payment fees and obstruction of return rights, with fifteen days to rectify. The marketplace has to decide quickly whether the violation is its own or the seller's. Under the consumer protection framework, a platform can be responsible for third-party sellers' failures, so pointing at the seller is not enough.
The marketplace removes the fee function from its seller tools, rewrites its returns policy to match the law, and amends seller terms so that sellers indemnify it for regulatory fines and must follow platform-wide refund rules. Because the fix lands inside the warning period, it avoids moving to the fine stage. The broader lesson for e-commerce law UAE compliance: platform design choices are regulatory choices.
Risks and common mistakes
Copying foreign terms and conditions
Terms written for the UK, the EU or the US often contain clauses the UAE consumer law treats as harmful: the right to change terms at any time, wide exclusions of liability and limits on refunds. Those clauses are unenforceable here and their presence can itself be a violation. Rewrite terms for the UAE, provide an Arabic version where required, and make sure what the terms promise matches what operations deliver. Our guide to commercial terms and conditions explains the drafting approach.
Hidden fees at the last step
Drip pricing, where delivery, service or payment fees appear only at the final step, is a target of both the Digital Commerce Law penalty schedule and consumer protection rules on clear pricing. Show the total cost, or at least every fee type, before the customer commits. If you charge more for certain payment methods, disclose that in the terms and on the payment page. Removing the surcharge is often cheaper than defending it.
Treating social media sales as outside the law
The Digital Commerce Law expressly covers trading through social media. Sellers who take orders through messaging apps or social posts still need a licence covering the activity, an invoice for every sale and a complaints channel. Influencer promotion of those products brings in Media Council rules on advertising. Informal does not mean unregulated.
Forgetting that marketplaces answer for sellers
Platforms that host third-party sellers can carry responsibility for those sellers' consumer law failures. Seller onboarding should include licence checks, product compliance warranties, takedown and suspension rights, and indemnities for fines. Monitor complaints by seller and act on patterns before the regulator does.
Ignoring data and children's rules
Checkout, loyalty and marketing tools collect personal data, and the PDPL governs how it is used and transferred. Marketing opt-outs are also a consumer right under the Digital Commerce Law. Platforms likely to be used by children must consider the child digital safety law; see our guide to children's data and online safety.
Cross-border sellers and free zones
Because the Digital Commerce Law reaches trading received from outside the UAE, foreign brands selling direct to UAE consumers should treat it as relevant even without a local entity. In practice, enforcement is easiest against platforms, payment providers and logistics partners with a UAE presence, so those partners will push compliance obligations down to foreign sellers by contract.
For goods, customs and VAT apply on import, and the commercial fraud regime applies once goods are in UAE markets, including free zones. Data transfers out of the UAE must satisfy the PDPL transfer rules. The DIFC and ADGM have their own data protection and contract regimes, which matter for platforms headquartered there, but consumer-facing sales to the wider UAE still engage federal consumer and e-commerce rules.
Disputes with consumers are usually heard by the onshore courts or handled through consumer complaint channels. The UAE Government portal explains how consumers complain, which is often how regulators first learn of a problem.
Checklist: e-commerce law UAE readiness
- Licence covers e-commerce activity and the selling entity is clear to customers.
- All prices, fees, delivery costs and delivery times are shown before purchase.
- Account verification and order confirmation create a clear record of the contract.
- Terms are UAE-specific, free of harmful terms and available in Arabic where required.
- Every order generates a detailed invoice.
- Returns and exchanges follow the law, and staff know when refunds are mandatory.
- A staffed, trackable complaints channel is published.
- Seller contracts on marketplaces include warranties, takedown rights and indemnities.
- Privacy, marketing consent and data transfers are aligned with the PDPL.
- A process exists to diarise the 30-day grievance window if a penalty arrives.
TRW & Co reviews platforms, terms and seller contracts against e-commerce law UAE requirements and helps businesses respond to warnings and penalty decisions. Where court representation is needed, we work alongside locally licensed advocates. To arrange a review, contact our Dubai team.
Frequently asked questions
01What is the main e-commerce law in the UAE?
The main statute is Federal Decree-Law No. 14 of 2023 on Trading by Modern Technological Means, sometimes called the Digital Commerce Law. It covers trading through websites, apps, platforms, social media and blockchain-based channels, including trade received from outside the UAE. Its penalties are set by Cabinet Resolution No. 200 of 2025, in force since 28 November 2025. Consumer protection, personal data, commercial fraud and media advertising rules apply alongside it.
02Do I need a licence to sell online in the UAE?
If you sell from the UAE, yes. You need a trade licence that includes e-commerce or online trading activity, issued by an emirate’s economic department on the mainland or by a free zone authority. Some emirates offer home-based or individual online licences for eligible applicants. Selling on social media or messaging apps without a licence is still trading. A foreign seller shipping into the UAE may not need a local licence, but UAE rules can still apply.
03What are the fines under the UAE digital commerce penalty schedule?
Penalties escalate over four stages of repetition. Many first breaches attract a written warning with fifteen days to rectify, while repeat breaches move to fines and temporary closure, and the most serious can end in permanent closure. The maximum fine in the schedule is reported to be AED 100,000. The Ministry can skip the warning stage for serious violations, and a continuing breach is treated as a new one.
04Can an online store refuse all returns in the UAE?
Not as a blanket rule. The Digital Commerce Law gives consumers return and exchange rights in specified cases, and the consumer protection framework treats statements such as “goods sold are neither returnable nor exchangeable” as harmful terms except in limited situations. Obstructing return rights is a listed violation in the penalty schedule. Write a returns policy that follows the law, then add any commercial goodwill on top.
05Are marketplaces liable for third-party sellers?
They can be. Under the consumer protection framework, a platform that allows third-party sellers can be responsible for those sellers’ failures to comply. Marketplaces should verify seller licences, require product compliance warranties, keep takedown and suspension rights, control fee and refund settings in the seller tools, and take indemnities for fines. Monitoring complaints by seller helps catch problems before the regulator does.
06Does the e-commerce law apply to free zone companies?
Yes. The Digital Commerce Law applies by reference to the activity, not the type of licence, so free zone sellers trading online are covered. Consumer protection and commercial fraud rules also apply in the free zones. A free zone company selling to UAE consumers onshore must also have a compliant route to the mainland market, such as a distributor, a mainland entity or, in Dubai, a mainland operating permit.
Sources and official materials
- UAE Legislation portal — Federal Decree-Law No. 14 of 2023 and Cabinet resolutions
- Ministry of Economy and Tourism — Consumer protection legislation — Consumer Protection Law and Executive Regulations
- UAE Government portal — Consumer protection — Consumer rights and complaint channels
- Telecommunications and Digital Government Regulatory Authority — Digital government and trust services regulator
- Dubai CommerCity — Free zone dedicated to digital commerce
General information only, current as at 27 October 2026. It is not legal advice and does not create a lawyer–client relationship. UAE law differs between the onshore jurisdiction, the DIFC, ADGM and the free zones, and changes frequently; check current official sources and take advice on the facts of your matter.
