Executive Reputation Management in Dubai: CEOs, Founders and Family Offices

The audit comes first and decides everything after it. It covers search results for the person's name and the company's, image and video results, news coverage, social platforms, review sites and forums, Wikipedia and Google's Knowledge Panel, and the answers AI assistants give when asked about the person. Names transliterated from Arabic, Hindi, Urdu, Malayalam or other scripts appear in several spellings, and each spelling is a separate search, so the audit runs every spelling the person is known by.

Every item found is then sorted. Some break a platform's own rules, such as impersonation, threats, doxxing or abuse, and go to the platform. Some fall within Google's legal-removal or personal-information routes. Some may be unlawful under UAE law, which is a matter for your UAE lawyer. Some are accurate, or sit with a publisher who declines to act, and those are answered with facts rather than removed. The result is the removal audit: which links are removable, by which route, and which are not.

Evidence is captured before any report is made. Each URL is recorded with the date and time and a hash of the capture, so that a record survives if the post is later edited or deleted. A UAE lawyer or the police can use that record.

Monitoring closes the cycle. New posts, reposts, new accounts in the person's name and changes in search results or AI answers are flagged as they appear, so that the next problem is dealt with while it is still small.

For a chief executive, a post about the person is often a post about the company, and the reverse. A former employee's allegation, a customer's video, a fake profile used to approach suppliers or a misleading article about the company's results lands on the chief executive's name as well. The work runs on both names together. Staff who post on the company's accounts are part of the plan, because under the Civil Transactions Law, Federal Decree-Law No. 25 of 2025, a principal is liable for the harm resulting from a harmful act its subordinate commits in the performance of their duty or because of it.

For a founder, the risk is what an investor, a bank's compliance team or a prospective partner finds before a meeting: an old dispute with a co-founder, a forum thread, a scam warning about a different person with a similar name, or a fake profile using the founder's photograph. The aim is a record that is accurate and complete when someone looks, with each false or unlawful item dealt with through its proper route.

For a family office, the brief is usually discretion. Principals often want less visibility, not more, and the family's private life is what needs protecting. UAE law is strong here: Article 431 of the Penal Code, Federal Decree-Law No. 31 of 2021, punishes publishing news, photos or comments related to the private or family life secrets of individuals, even if they are true.

Where the family office or its companies sit in the DIFC, the DIFC Data Protection Law, DIFC Law No. 5 of 2020, governs their own handling of personal data, because the Personal Data Protection Law, Federal Decree-Law No. 45 of 2021, does not cover companies in free zones that have their own data-protection legislation (Article 2(2)). Civil and commercial disputes arising out of the DIFC, or that the parties agree in writing to bring there, can go to the DIFC Courts, which sit in English. In Abu Dhabi, the ADGM Courts hear civil or commercial disputes that the parties agree in writing to bring to them. The guide to the right to be forgotten in the UAE covers the erasure rights.

If anything involves a person under 18, it goes to the police: 999 in an emergency, the Dubai Police e-crime service, Abu Dhabi Police Aman or the Ministry of Interior eCrimes platform. RepuLex does not take it on as a reputation matter.

Article 43 of Federal Decree-Law No. 34 of 2021 punishes whoever uses an information network, IT equipment or an information system and "insults another or attributes a quality to him that would make that person subject to punishment or contempt by third parties", with imprisonment and/or a fine of AED 250,000 to AED 500,000. Offline, Article 425 of the Penal Code punishes attributing to someone, through any means of publicity, an incident that would make them subject to punishment or expose them to public hatred or contempt, and Article 426 punishes an insult to honour or dignity that attributes no particular incident. The official English translation calls Article 425 "libel" and Article 426 "slander", which is not how the words are used in everyday English: the line is between alleging a specific incident and insulting without one, not between writing and speech. The guide to defamation in UAE law sets out every offence.

Truth is a narrow defence. Article 428 of the Penal Code allows proof of the facts only where the allegation is against a public servant, or a person entrusted with a public service, and is connected with the job or service, and not where more than five years have passed since the incident. Article 44 of the Cybercrime Decree-Law punishes using an information network to invade someone's private or family life without consent, including by publishing news, photos, comments, data or information "even if it is true and genuine" with intention of harming the person, with imprisonment of at least 6 months and/or a fine of AED 150,000 to AED 500,000. The guide to why truth is not a defence in the UAE works through the conditions.

The law reaches beyond the UAE's borders. Under Article 69 of the Cybercrime Decree-Law, it applies to offences committed outside the UAE where, among other cases, the crime harms any UAE national or resident. A post about a Dubai resident is not outside the law simply because it was typed abroad. Whether a complaint is practical against someone abroad is a question for your UAE lawyer.

The same rules bind your side. A reply that insults a critic, alleges misconduct against them or exposes their private life can itself engage Article 43 or Article 44. Article 52, on false news and rumours, is about harm to the public, such as to public order or the national economy, and is not a private reputation claim.

The table shows problems executives commonly bring and the provisions that can apply. Which provision is charged is for the prosecution and the court. The guide to fake accounts in your name and the guide to online blackmail in the UAE take two of them step by step.

Removal happens in one of three places. At the source, the platform or the publisher takes the content down, which removes it for everyone. In search, Google removes a result under its legal-removal or personal-information policies; that takes it out of Google Search but not off the web, and the page stays live until the site owner removes it. In the UAE, the competent authorities or the Attorney General can order access blocked, which disables access in the UAE while the content stays online elsewhere. No private person or agency can issue such an order.

Correction is often the quicker route for news. A publisher may update an article that is out of date, add the outcome of a case it reported, or correct a factual error when shown evidence. Corrections need documents, not adjectives: a court outcome, a regulator's register, a dated company filing. The guide to removing a news article about you sets out the routes, including Google's forms.

Some content stays. A platform may decide that a post breaks none of its rules, a publisher may stand by an article, and Google may decline a request. What remains is answered with accurate facts in the places people look: the company's own website, official profiles and an on-the-record statement. RepuLex does not publish volumes of new material to outrank what it cannot remove; that method is suppression, and its effect lasts as long as the new material outranks the old.

A UAE legal route runs alongside these, taken by you or your UAE counsel. A criminal action for insult and slander needs a complaint by the victim, or by a representative or an attorney under a special power of attorney, filed with the Public Prosecution or a judicial police officer (Articles 11 and 12 of the Criminal Procedures Law, Federal Decree-Law No. 38 of 2022). Take advice within three months of learning of the post and who made it. Article 11 says the complaint is not admitted after three months from when the victim becomes aware of the crime and its perpetrator; we have found no primary text settling whether that limit also governs the online offence in Article 43, so treat three months as the working deadline. The guide to filing a defamation case in Dubai covers the steps.

Two features of UAE law make a negotiated end possible. Under Article 68 of the Cybercrime Decree-Law, the accused may invoke an amicable settlement with the victim before the judgment becomes final, which is the natural point to agree that content comes down. A civil court may order a specific act as well as money: under Article 256(2) of the Civil Transactions Law it may order the restoration of the status quo ante or the performance of a specific matter related to the harmful act. As reported by Gulf News, the Al Ain Court for Civil, Commercial and Administrative Claims ordered an apology and a clear denial of the allegations on the same Snapchat account, with AED 100,000 in compensation against AED 200,000 claimed, after a criminal court had fined three defendants AED 10,000 each and ordered the video deleted.

The audit and the evidence record come first, because nothing should be reported before it is captured. Reports to platforms and to Google follow as soon as the route for each item is clear. Across its removal work, RepuLex's record is a 7-day average to confirmed removal. That is an average, not a promise: a platform, Google, a publisher or a court decides each item.

UAE law sets no fixed clock for platforms. Orders to correct, remove or disable content come from the competent authorities, the Attorney General or a court, and must be obeyed within the period stated in the order. A private request, from you or from any agency, carries no statutory deadline, which is why evidence, clarity and the right route matter more than pressure.

Start early before a known event. A founder before a fundraising round, or a chief executive before an appointment or a listing, gains from having the record in order first. Corrections to a Knowledge Panel or to AI answers can take longer to show than removals, because they depend on other systems updating.

Your UAE lawyer's fees for a complaint, a settlement or a civil claim are separate, agreed with them on their own terms. No fee, to RepuLex or anyone else, buys a decision: the platform, Google, the publisher, the prosecution or the court makes it.

In practice that means the removal audit; the dated, hashed evidence record; platform complaints and policy reports to Google, Meta (Facebook and Instagram), X, YouTube, TikTok, Telegram, Reddit and review sites; Google's legal-removal and personal-information routes; requests to publishers for corrections and updates; and monitoring. RepuLex does not file complaints, sue or appear in the UAE, and it does not describe itself as a law firm.

For the wider service, see online reputation management in the UAE and reputation work for clients in Dubai. Related work sits on its own pages: online crisis management in Dubai for a sudden public problem, Wikipedia and Knowledge Panel work for the public record, and AI reputation management in the UAE for what assistants say. If the problem is an Indian news portal or platform, see reputation management for Indians in the UAE.