By: Ahmed Adly, Founder of Al Adly & Co.
Key Takeaways
- The UAE Cabinet has approved a resolution setting the minimum age for social media use at 15, making the UAE the first Arab country to implement a full platform-level ban on under-15 access.
- Children below 15 are prohibited from creating, using, or operating personal accounts on any social media platform, and from accessing core features including posting, commenting, sharing, and joining groups.
- Platform compliance is mandatory, not voluntary. Platforms that fail to implement the required measures within the transitional period of up to 12 months risk being blocked in the UAE.
- Self-declaration of age is expressly prohibited as a verification method. Digital identity checks and AI-supported technologies are required.
- Children aged 15 to 16 are permitted to use social media but must be subject to enhanced protections, including content restrictions, limits on interaction with unknown users, usage controls, and parental supervision tools.
- Parents and guardians are assigned legal responsibility for preventing children's social media use and for preventing attempts to bypass age verification.
- For fintech operators, crypto platforms, digital agencies, and influencer-dependent businesses, exposure extends beyond the family. Platform obligations, data handling, and youth-targeted marketing all require immediate review.
Why This Matters for Your Business
The UAE Cabinet's resolution on the minimum social media age is not a matter for parents alone. For businesses operating digital platforms, social media-dependent marketing, influencer programmes, or any service that captures or processes user data in the UAE, this resolution creates immediate compliance obligations and, in some cases, direct legal exposure.
For fintech founders and crypto platforms, the connection is direct. Social media channels are the primary medium for community building, token promotion, investor communications, and brand development in the digital asset space. The UAE's cybercrime and regulatory frameworks already treat online communications as legally relevant and potentially evidentiary. The new resolution adds a further layer: platforms — including those that enable community discussion or promotional content involving UAE audiences — must now implement technical and administrative measures to verify user age or face regulatory consequences.
Liability in this area does not always arise from deliberate misconduct. More often, exposure arises from the assumption that the problem belongs to someone else — the platform, the parent, or the regulator. The resolution changes that assumption. Understanding where your business sits within this framework is the first step in managing exposure effectively.
The Legal Framework: What Applies to Your Business
The resolution is a Cabinet-level instrument, issued by the UAE Cabinet chaired by His Highness Sheikh Mohammed bin Rashid Al Maktoum, Vice President, Prime Minister, and Ruler of Dubai. It operates within a broader digital legal framework that includes Federal Decree-Law No. 34 of 2021 on Combatting Rumours and Cybercrimes (as amended by Federal Law No. 5 of 2024), the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021), and the UAE Civil Transactions Law (Federal Decree-Law No. 25 of 2025), which reduced the age of legal capacity to 18 with effect from 1 June 2026.
The scope of the resolution is technology-neutral and platform-agnostic. It applies to all social media platforms — free or paid — that enable users to create accounts or personal profiles, engage in social interaction, publish or share content, or that use algorithmic systems to display, rank, or recommend content. The definition is deliberately broad and is intended to capture all major platforms, including Instagram, TikTok, Snapchat, X (formerly Twitter), Facebook, and YouTube's community features, as well as equivalent services and community platforms such as Discord and Telegram where social features are present.
A designated Child Digital Safety Council oversees implementation, including the approval of acceptable age-verification mechanisms, and the verification processes adopted by platforms are subject to regular review and audit.
For businesses operating in the DIFC or ADGM, the Cabinet resolution applies as federal law. Free zone regulators, including the FSRA, DFSA, and VARA, may impose additional obligations in relation to platform conduct, marketing to minors, and data protection applicable to regulated entities within their jurisdictions.
The Three-Tier Age Framework: Who Can Do What
The resolution distinguishes two regulated age bands — under 15, and 15 to 16 — with everyone aged 17 and above subject to standard access. The obligations on platforms and the responsibilities on parents differ materially across each band.
Under 15 — Full Prohibition
Children below 15 are prohibited from creating, using, or operating personal accounts on any social media platform. Platforms must prevent these users from accessing core features, including social interaction, posting content, commenting, sharing, and joining public groups or open channels. Any existing accounts belonging to under-15 users must be identified and disabled. This is a platform-level obligation, not a matter for parents to enforce in isolation.
Ages 15 to 16 — Permitted with Enhanced Protections
Teenagers aged 15 to 16 are permitted to use social media but must be subject to mandatory enhanced protections. Platforms are required to implement age-appropriate content classification and restriction, disable high-risk features such as interaction with unknown users, regulate usage time and duration, and provide parental control tools. These are not optional features — they are legally required platform configurations for this age group.
Age 17 and Above — Standard Access
Users aged 17 and above are subject to standard platform access rules. Age verification is still required; self-declaration is prohibited across all age groups. The UAE's broader cybercrime, privacy, and content regulations continue to apply to all users regardless of age.
Age Verification: The End of Self-Declaration
Many platforms currently rely on users entering their date of birth during account registration. Under the new UAE framework, that approach is no longer legally acceptable.
Platforms are required to implement digital identity checks and AI-supported age-verification technologies. They must also implement technical measures to prevent users from circumventing age-verification systems. This represents a fundamental shift in the technical architecture required to operate a social media platform within the UAE's legal framework. It is also a significant development and compliance undertaking for any platform that has not already invested in robust age-verification infrastructure.
Platform Liability: What Operators Need to Know
Platform operators are not passive intermediaries under this resolution. They are the primary compliance actors, responsible for implementing and maintaining the technical and administrative measures required by law. The resolution assigns specific obligations to platforms and makes non-compliance a regulatory offence with defined consequences.
In practice, exposure for platform operators arises across three levels:
Regulatory action: platforms that fail to implement required measures within the transitional period risk being blocked in the UAE — a consequence with significant commercial impact for any platform with UAE user revenue or market presence.
Regulatory fines and sanctions: under the broader UAE cybercrime and digital regulation framework, non-compliance with regulatory directives may also attract financial penalties and supervisory action, including suspension or restriction of platform operations.
Civil and reputational exposure: where a platform's failure to implement age verification leads to identifiable harm to a child user, civil liability and significant reputational risk may follow.
Employers and businesses that operate social media channels, influencer partnerships, or community platforms as part of their commercial operations should also note that the resolution's obligations on data handling extend to prohibiting the use of children's personal data for targeting purposes, including algorithmic advertising and content recommendation. This has direct implications for digital marketing strategies that rely on platform-provided audience targeting tools.
The Broader Digital Conduct Context
The social media age resolution does not operate in isolation. It is part of a broader and actively enforced digital legal framework in the UAE. Federal Decree-Law No. 34 of 2021 on Combatting Rumours and Cybercrimes criminalises online defamation, misinformation, threats, data misuse, and the promotion of unlicensed financial activity — all of which are directly relevant to businesses operating in digital and social media environments.
For fintech and crypto businesses in particular, Article 48 of the Cybercrime Law, read alongside the VARA, SCA, and FSRA regulatory frameworks, addresses the promotion or facilitation of dealings in virtual assets where such activity is not properly licensed. Community channels, influencer posts, and social media promotions that involve virtual assets or financial products directed at UAE audiences must be reviewed against both the new age resolution and the existing cybercrime framework simultaneously.
The UAE already has strict laws governing digital content, and enforcement activity has intensified. Businesses should treat social media compliance as a regulated activity, not a marketing function operating outside the legal perimeter.
Penalties at a Glance
Note: The age resolution's own consequences confirmed to date are account-disabling obligations and platform blocking; a detailed fine schedule under the resolution has not yet been published. The dirham figures below are drawn from the existing Cybercrime Law (Federal Decree-Law No. 34 of 2021) and related frameworks, and should be verified against the consolidated statutory text before reliance.
Obligation / Offence | Legal Basis | Penalty / Consequence | Applies To |
|---|---|---|---|
Failure to ban under-15 accounts | Cabinet Resolution (June 2026) | Platform blocking in the UAE | Social media platforms |
Failure to implement age verification | Cabinet Resolution (June 2026) | Platform blocking plus regulatory sanctions | Social media platforms |
Accepting self-declared age | Cabinet Resolution (June 2026) | Regulatory action for non-compliance | Social media platforms |
Failure to provide 15–16 parental controls | Cabinet Resolution (June 2026) | Regulatory action for non-compliance | Social media platforms |
Use of children's data for targeting | Cabinet Resolution + UAE PDPL (FDL 45/2021) | Administrative fines plus PDPL penalties | Platforms and advertisers |
Non-compliance with takedown orders | Art. 53, Federal Decree-Law No. 34 of 2021 | AED 300,000–10,000,000 | Platform operators |
Unlicensed virtual asset promotion | Art. 48, Federal Decree-Law No. 34 of 2021 | AED 20,000–500,000; possible imprisonment | Fintech / crypto platforms |
Online defamation via social media | Art. 43, Federal Decree-Law No. 34 of 2021 | AED 250,000–500,000; up to 2 years | Individuals and businesses |
Misinformation (standard cases) | Arts. 25, 52, Federal Decree-Law No. 34 of 2021 | From AED 100,000; from 1 year | Individuals and platforms |
Protecting Your Business: Practical Steps
For Parents and Families
Review your children's current social media presence and proactively close any accounts belonging to children under 15. Do not wait for platform-initiated closure during the transition period.
For children aged 15 to 16, activate all available parental control, content restriction, and usage monitoring tools on each platform they use.
Understand that the resolution assigns you legal responsibility for preventing your child from circumventing age verification. This is an active obligation, not a passive one.
Seek legal advice if you believe your child has been harmed through a platform's failure to implement required age restrictions.
For Social Media Platforms and Technology Businesses
Begin implementation planning immediately. The transitional period of up to 12 months runs from 18 June 2026, concluding by June 2027. AI-supported age verification, parental control tools, and account-disabling mechanisms represent significant technical undertakings requiring immediate resourcing.
Conduct a product audit to assess whether any existing features — community boards, referral programmes, social interaction elements — fall within the resolution's definition of social media functionality requiring compliance.
Review and update data handling practices to ensure children's personal data is not used for targeting, algorithmic recommendation, or any other purpose beyond that permitted by the resolution and the UAE PDPL.
Implement technical circumvention-prevention measures, closing the loopholes that made previous voluntary age gates ineffective.
Establish documented compliance logs and audit-ready records for all age verification and access restriction measures implemented.
Develop a regulatory engagement plan for interaction with UAE authorities during the transition period.
For Fintech, Crypto, and Digital Marketing Businesses
Review all influencer partnerships, sponsored content arrangements, and social media campaigns for any involvement of UAE-based creators or audiences under 15, and adjust targeting parameters accordingly.
Assess whether your platform's community features — token holder forums, referral channels, public leaderboards, Discord communities — fall within the resolution's scope and require age verification measures.
Review any marketing material, promotional content, or community communications involving virtual assets or financial products against both the age resolution and Article 48 of the UAE Cybercrime Law simultaneously.
Ensure all virtual asset promotions directed at UAE audiences are properly licensed or authorised under the applicable VARA, SCA, or FSRA frameworks. The enforcement environment has materially strengthened.
Treat social media as a regulated activity across marketing, operations, and community engagement, not as a function operating outside the legal perimeter.
Key Takeaways for Platform Operators and Digital Businesses
The UAE's social media age resolution forms part of a broader and increasingly sophisticated digital legal framework that spans cybercrime, data protection, virtual asset regulation, and now age-based access control. The common thread across all of these frameworks is the same: enforcement focuses on impact and systemic risk rather than intent alone. A platform that fails to implement required measures is non-compliant regardless of whether it intended to harm anyone.
The transitional period is an implementation window, not a grace period for decision-making. Platforms that begin compliance planning now will be best positioned to meet the June 2027 horizon and to demonstrate good faith to UAE regulatory authorities in the interim. Platforms that treat the transition period as an opportunity to delay will find themselves facing an enforcement environment that has consistently demonstrated its willingness to block non-compliant services.
For businesses across the digital economy — fintech, crypto, advertising, e-commerce, and media — the practical message is clear: social media compliance is now a legal obligation, not a reputational choice. Structured governance, clear internal controls, and early legal oversight are the most effective risk management tools available.
Speak to the Team at Al Adly & Co.
If you would like to assess your regulatory exposure under the UAE's social media age resolution, cybercrime law, fintech regulatory framework, or virtual asset rules, the team at Al Adly & Co. advises businesses operating across mainland UAE, DIFC, ADGM, and VARA-regulated environments.
Ahmed Adly and his team provide legal guidance on digital regulatory compliance, platform liability, cybercrime risk, data protection, and crypto-related structuring for companies operating in the UAE digital economy, as well as for families and individuals seeking clarity on how the new rules affect them personally.
Disclaimer: This article is prepared by Al Adly & Co. for general informational and client advisory purposes only. It does not constitute legal advice and does not create a lawyer-client relationship. Information is based on the UAE Cabinet resolution announced by WAM on 18 June 2026. The regulatory position may be supplemented by implementing regulations, ministerial guidance, or platform-specific directives. For advice specific to your platform, business, or circumstances, please contact our team directly. © 2026 Al Adly & Co. Law Firm. All rights reserved. | www.aladly.co
Ahmed Adly
Founder & Managing Partner
Ahmed Adly is the founder and managing partner of Al Adly & Co, advising international businesses and entrepreneurs operating in the UAE and Egypt. With more than 20 years of legal experience and a background in senior government legal roles, he helps clients navigate regulatory complexity, structure transactions, and resolve high-value disputes.