Serves under-18s, in the United Arab Emirates

Federal Decree by Law No. 26 of 2025, Arts. 6-13 · Read the law's page

• Applies to internet service providers and digital platforms operating in or directed at users in the UAE (websites, search engines, apps, messaging services, forums, gaming, social media, live-streaming, podcast, streaming and e-commerce platforms), whenever children use them or are exposed to their content or services.
• Do not collect, process, publish or share the personal data of a child under 13 unless you obtain explicit, documented, verifiable parental consent, provide a rapid way to withdraw it, disclose your data-privacy policy and restrict access to authorised personnel.
• Do not use a child's personal data for commercial purposes, targeted advertising to the child, or tracking beyond the originally authorised purpose.
• Adopt effective and reasonable age-verification mechanisms scaled to your platform's risk classification, under the classification system the Cabinet is to issue.
• Do not let a child participate in, hold an account for or access online commercial gaming, including gambling, and take technical and administrative measures, including age verification and parental controls, to prevent that access.
• Give children's accounts default high-privacy settings, and provide age-based use controls, blocking and content-filtering tools, age classification of content, regulation of targeted advertising to children, and parental control tools including daily-use time limits.
• Provide reporting channels for child pornographic material and harmful content, and report such material to the concerned authorities.
• Bring yourself into compliance within one year of the law's entry into force (1 January 2026), a period the Cabinet may extend by resolution.