Is truth a defence to defamation in UAE law? Usually not. Under Article 428 of the Crimes and Penalties Law, Federal Decree-Law No. 31 of 2021, proving an allegation is a defence only where it is made against a public servant or a person entrusted with a public service, concerns the job or service, and relates to an incident no more than five years old. Statements about private persons and companies have no such exception.
Two privacy provisions go further, and say so in terms. Article 431 of the same law punishes publishing private or family life secrets "even if they are true". Article 44 of Federal Decree-Law No. 34 of 2021 on Countering Rumours and Cybercrimes punishes publishing news, photos or information online "even if it is true and genuine", with intention of harming the person. Unlike India, where a true statement made for the public good is a defence, UAE law asks whether the words attribute an incident, insult someone or expose their private life, and lets truth answer the charge only in the narrow public-servant case.
This guide sets out the exception and its conditions, the open question for online posts about officials, the privacy offences that apply even to true information, the defences that do not depend on truth, and what to do whether you are the person written about or the person who wants to speak.
What RepuLex does, and what your UAE lawyer does
RepuLex
- Platform complaints and policy reports to Google, Meta, X, YouTube, TikTok, Telegram, Reddit and review sites.
- Google's own legal-removal and personal-information routes.
- A dated, hashed record of every URL, which you, the police or a UAE lawyer can rely on.
- The removal audit: which links can come down, by which route, and which cannot.
- The Indian legal route, through its partner law firm Unified Chambers And Associates, for content published by Indian outlets or hosted on Indian platforms.
You, or your UAE lawyer
- A criminal complaint to the police or the Public Prosecution, made in person or through a lawyer.
- Any civil claim in a UAE court.
- Representation before UAE courts and the Public Prosecution, which only lawyers on the UAE Roll of Practicing Lawyers may provide.
RepuLex is an online reputation management agency headquartered in New Delhi. It is not a law firm and is not licensed in the UAE. It works alongside the UAE counsel you instruct, and never files, complains or appears in the UAE on anyone's behalf.
Is truth a defence to defamation in UAE?
Truth is a defence to defamation in UAE law only where the statement concerns a public servant or a person entrusted with a public service, relates to the job or service, is proved by the person who made it, and concerns an incident no more than five years old, under Article 428 of the Crimes and Penalties Law.
The offence of attributing an incident, in Article 425 of the Crimes and Penalties Law, is defined by the effect of the allegation. It punishes anyone who, through any means of publicity, attributes to another person an incident "that would make him subject to punishment or expose him to public hatred or contempt". The wording turns on what the allegation would do, not on whether it is false. Proof that the incident happened is allowed as a defence only in the circumstances set out in Article 428.
A note on terms. The official English translation calls this offence "libel" (qadhf, Article 425) and calls an insult that attributes no particular incident "slander" (sabb, Article 426). In everyday English, libel is written and slander is spoken, so the translation can mislead. In UAE law the line is whether a particular incident is attributed. Truth can only matter where one is, because an insult asserts nothing that could be proved.
Online, the same allegation falls under Article 43 of the Cybercrime Decree-Law, with a heavier penalty, and the position on truth is less clear still. The guide to defamation in UAE law sets out every offence and penalty; this one deals with truth.
The exception in Article 428, and its conditions
Article 428 of the UAE Crimes and Penalties Law says there is no crime if the person who made an allegation proves the incident, but only where the allegation is against a public servant or a person entrusted with a public service and the incident is connected with the job or service.
The article reads: "There is no crime if the perpetrator proves the incident which attributed to the victim, whenever such attribution is against a public servant or a person entrusted with a public service and whenever said incident is connected with the job or service." Every condition has to be met. An allegation about an official's private life is outside it. So is an allegation about a private employer, a landlord, a business or a neighbour, however well documented.
The article then closes the door on older material. Proof is not allowed if more than five years have passed since the incident occurred, or if the crime has lapsed or the judgment has been forfeited.
| Condition | What it means in practice |
|---|---|
| The person written about is a public servant or a person entrusted with a public service | Private persons and companies are outside the exception, however accurate the allegation |
| The incident is connected with the job or service | An allegation about the person's private or family life is outside the exception |
| The person who made the allegation proves the incident | The burden is on the person who made the allegation, not on the person written about |
| No more than five years have passed since the incident occurred | Proof is not allowed for older incidents |
| The crime has not lapsed and the judgment has not been forfeited | Where either has happened, proof is not allowed |
Online posts about officials: a heavier offence and an open question
An online post accusing a public official of misconduct in their work engages Article 43 of the UAE Cybercrime Decree-Law, which treats an offence against a public official because of their work as aggravated, and the Penal Code's truth exception in Article 428 should not be relied on for such a post without advice.
Article 43 of Federal Decree-Law No. 34 of 2021 punishes whoever uses an information network, IT equipment or an information system and "insults another or attributes a quality to him that would make that person subject to punishment or contempt by third parties". The penalty is imprisonment and/or a fine of AED 250,000 to AED 500,000. Its second paragraph makes it an aggravating circumstance where the offence is committed against a public official or a person entrusted with a public service during or because of the performance of their work.
Article 428 sits in the Penal Code, and we have not found a primary text settling whether it also applies to the online offence. Until a UAE lawyer has advised on your facts, do not rely on it for a post, a video or a comment. The route the law itself protects is a good-faith report to the authorities under Article 430, set out below.
True private information: Article 431 of the Penal Code
Under Article 431 of the UAE Crimes and Penalties Law, publishing news, photos or comments related to the private or family life secrets of individuals, by any means of publicity, is punishable with incarceration and a fine even if what is published is true.
Article 431 begins with intrusion: eavesdropping on or recording private conversations, or photographing a person in a private place, without consent. It then adds: "The same penalty shall apply if a person publishes, by any means of publicity, news, photos or comments related to the private or family life secrets of individuals, even if they are true." Devices are confiscated and recordings erased.
The test is the nature of the information, not its accuracy. Matters such as a person's health, relationships, family disputes or what happens inside their home can fall within private or family life. Publishing them through any means of publicity, which Article 10 defines to include public speech and writings, pictures and audio or visual materials circulated by any means, can be an offence even where every word is accurate.
Online privacy: Article 44 and "even if it is true and genuine"
Article 44 of the UAE Cybercrime Decree-Law punishes using an information network to invade someone's private or family life without consent, including publishing news, photos, comments, data or information even if it is true and genuine with intention of harming the person, by imprisonment of at least 6 months and/or a fine of AED 150,000 to AED 500,000.
Article 44 is headed "Revealing Secrets and Invasion of Privacy". It applies where someone uses an information network, information system or IT equipment to invade "the privacy or sanctity of private or familial life of someone without his consent". Article 44(3) says in terms that truth is no answer: it covers publishing material "even if it is true and genuine". What it requires instead is an invasion of private or family life without consent and an intention of harming the person. Sharing someone's private messages, photos or location to shame them can fall within it.
The final paragraph of Article 44 covers the opposite case, where the material is not genuine. Using an information system or IT equipment to modify or process any record, photo or scene with the intention of defaming or insulting another person carries imprisonment of at least one year and/or a fine of AED 250,000 to AED 500,000. A genuine private image used to harm someone can fall under Article 44(3), and a doctored one under the final paragraph.
The acts Article 44 lists include:
- taking photos of third parties in any public or private place, or preparing, transferring, disclosing, copying or keeping electronic photos (Article 44(2));
- publishing news, electronic photos, images, scenes, comments, data or information, "even if it is true and genuine, with intention of harming the person" (Article 44(3));
- photographing or publishing images of the injured, the dead or accident victims without consent (Article 44(4));
- tracking or disclosing geographic location data (Article 44(5)).
Defences that do not depend on truth
Two UAE Penal Code defences do not depend on proving truth: statements in a litigant's oral or written defence before courts or investigating authorities, within the limits of the right of defence (Article 429), and good-faith reports to the judicial or administrative authorities of an act that makes someone legally liable (Article 430).
Article 430 matters most to anyone holding a true allegation against a private person or a company. It says there is no crime "if an individual informs in good faith the judicial or administrative authorities of an act rendering its perpetrator legally liable". The protection attaches to a good-faith report made to the authorities, not to publication. A police report, a complaint to the Public Prosecution or a complaint to the administrative authority concerned is protected in a way that a public post is not.
Article 429 protects what is "included in oral or written defence of the litigants, within the limits of the right of defence, before courts or investigating authorities". It covers what you say in your own defence in proceedings, within those limits. It does not extend to repeating the same allegations outside the proceedings.
Reviews and complaints about businesses
A true negative review of a UAE business is not protected by truth alone, because the Article 428 exception does not cover private persons or companies, so a review that attributes to a business an incident that would expose it to punishment or contempt carries risk even if it is accurate.
An allegation of that kind in a review has led to a criminal conviction and a compensation order. As reported by Gulf Today in October 2024, the Al Ain Court of First Instance ordered a man to pay a company AED 20,000 in compensation, below the AED 60,000 claimed, over a comment on a Google website accusing it of forgery and of deceiving customers. He had first been convicted in a criminal case. The report is news, not precedent.
A review that describes your own experience in factual terms, without insult and without attributing to the business an incident that would expose it to punishment or contempt, is a different thing from one that accuses a business of fraud. The line is not always easy to draw, and the guide to negative Google reviews and UAE law covers it for both the reviewer and the business. Where you hold evidence of wrongdoing by a business, Article 430 points to the safer route: a good-faith report to the authority concerned.
If true information about you has been published
If someone publishes true but damaging information about you in the UAE, you may still have a complaint, because truth is not a general defence for statements about private persons and true private information is protected by Article 431 of the Penal Code and Article 44 of the Cybercrime Decree-Law.
Work through these steps:
- Capture the evidence: the URL, the account, the date and time, screenshots that show the date, and who has shared it. A dated, hashed record of each URL is what a UAE lawyer or the police can use.
- Note when you learned of the post and when you learned who made it, and take advice within three months of learning of the post and who made it. That limit is in Article 11 of the Criminal Procedures Law, Federal Decree-Law No. 38 of 2022. We have not found a primary text settling whether it also governs the online offence in Article 43, so treat three months as the deadline.
- Do not answer with private information about the poster. That can be an offence in its own right under the same articles.
- If a person under 18 is involved, or the post comes with a threat or a demand, go to the police first, before any payment or reply: 999 in an emergency, the Dubai Police e-crime service, Abu Dhabi Police Aman or the Ministry of Interior eCrimes platform.
- Report the content to the platform under its privacy or harassment policy. Google's Search removal policies cover, among other things, personally identifiable information and doxxing content, personal sexual content and content related to individuals under 18; other content that should be removed under the law goes through Google's legal-removal process.
- Removing a result from Google Search does not remove the page from the internet. The site owner or the platform has to take the page itself down.
If you want to speak about someone
Before publishing anything true but damaging about a person or a business in the UAE, check whether it attributes an incident, whether it touches private or family life, and whether a good-faith report to the authorities would serve the purpose better, because truth usually does not protect the post.
Five questions to ask first:
- Does it attribute an incident? An allegation of a specific act that would expose the person to punishment or contempt engages Article 425, and online Article 43. Unless it concerns a public servant's job, within five years, and you can prove it, truth is not a defence.
- Does it touch private or family life? If so, Article 431 and, online, Article 44 apply even if it is true.
- Is it an insult? Insult under Article 426, and online under Article 43, does not depend on truth at all.
- Is there a safer channel? A good-faith report to the police, the Public Prosecution or the authority concerned is protected by Article 430.
- Have you taken advice? A UAE lawyer on the Roll of Practicing Lawyers can test the wording against your facts before you publish.
Truth and the civil claim for compensation
A civil compensation claim under the UAE Civil Transactions Law is framed around harm, and Article 254(1) treats an infringement on reputation as moral harm, so do not assume that truth defeats a compensation claim either; take advice before relying on it.
Article 246 of Federal Decree-Law No. 25 of 2025, in force since 1 June 2026, says every act causing harm to another obliges its perpetrator to compensate, and Article 254(1) treats an infringement on another's reputation as moral harm. The criminal and civil routes are separate: under Article 245(2), a criminal penalty has no effect on the scope of civil liability or the amount of compensation. The guide to defamation compensation in the UAE covers claims and reported awards.
Where RepuLex fits
RepuLex, an online reputation management agency based in New Delhi, handles the evidence, platform and search side of a UAE privacy or defamation matter alongside your UAE lawyer, and does not file, complain, sue or appear in the UAE.
That means the dated, hashed evidence record, privacy and harassment reports to the platforms, Google's personal-information and legal-removal routes, and monitoring for reposts. A platform decides under its own policies, and the police, the prosecution or a court decides the legal case. See online reputation management in the UAE for how the work is organised. For Indians in the UAE, whose problem is often an Indian news portal or a forwarded message, see reputation management for Indians in the UAE.
Frequently asked questions
Is truth a defence to defamation in UAE?
Only in a narrow case. Under Article 428 of the Crimes and Penalties Law, there is no crime if the person who made an allegation proves it, but only where it concerns a public servant or a person entrusted with a public service, is connected with the job or service, and the incident is no more than five years old. For statements about private persons and companies, truth is not a general defence.
Can you be sued in UAE for telling the truth?
Yes. Truth is not a general defence for statements about private persons or companies in the UAE. Attributing an incident that would expose someone to punishment or contempt is an offence under Article 425 of the Penal Code and, online, Article 43 of the Cybercrime Decree-Law. Publishing true private or family information can be an offence under Article 431 and Article 44. A civil claim for compensation is a separate route.
Is it illegal to post true information about someone in UAE?
It can be. Article 431 of the Crimes and Penalties Law punishes publishing news, photos or comments about the private or family life secrets of individuals "even if they are true". Online, Article 44(3) of the Cybercrime Decree-Law punishes publishing news, photos, data or information "even if it is true and genuine" with intention of harming the person, with imprisonment of at least 6 months and/or a fine of AED 150,000 to AED 500,000.
Can I post the truth about a government official in UAE?
Proof of a job-related allegation about a public servant is a defence under Article 428 of the Penal Code, if the incident is no more than five years old. Online, though, Article 43 of the Cybercrime Decree-Law treats an offence against a public official because of their work as aggravated, and we have not found a text confirming that Article 428 applies to the online offence. A good-faith report to the authorities, protected by Article 430, is the safer route.
Can I report someone to the police in UAE without being accused of defamation?
Article 430 of the Crimes and Penalties Law says there is no crime if an individual informs the judicial or administrative authorities in good faith of an act that makes its perpetrator legally liable. A report made in good faith to the police or the Public Prosecution falls within that protection. It rests on good faith and on the report going to the authorities, so it does not cover publishing the same allegation online.
Is it illegal to share someone's real photos without consent in UAE?
It can be, even if the photos are genuine. Article 44 of the Cybercrime Decree-Law, which applies to invasions of private or family life without consent, lists taking photos of third parties in any public or private place, transferring, disclosing, copying or keeping electronic photos, and publishing photos even if true and genuine with intention of harming the person. The penalty is imprisonment of at least 6 months and/or a fine of AED 150,000 to AED 500,000.
Is a true negative review legal in UAE?
Truth alone does not protect it. Article 428 does not cover private persons or companies, so a review that attributes to a business an incident that would expose it to punishment or contempt carries risk even if accurate. As reported by Gulf Today, the Al Ain Court of First Instance ordered AED 20,000 in compensation, below the AED 60,000 claimed, over a Google comment accusing a company of forgery, after a criminal conviction.
Related UAE pages
- Defamation in UAE Law: Penalties, Fines and What to Do
- Negative Google Reviews in the UAE: The Law for Reviewers and Businesses
- UAE Social Media Defamation Compensation: The New Civil Law and Reported Awards
- The Right to Be Forgotten in the UAE: Erasure, Delisting and What the Law Allows
- Online reputation management in the UAE: every service and guide
Sources
- Federal Decree-Law No. 31 of 2021, Crimes and Penalties Law, Arts. 10, 425, 426 and 428 to 431
- Federal Decree-Law No. 34 of 2021 on Countering Rumours and Cybercrimes, Arts. 43 and 44
- Federal Decree-Law No. 38 of 2022, Criminal Procedures Law, Art. 11
- Federal Decree-Law No. 25 of 2025, Civil Transactions Law, Arts. 245, 246 and 254
- Federal Decree-Law No. 34 of 2022 Regulating the Legal Profession and Legal Consultation Profession, Art. 6
- Dubai Police, cybercrime reporting service
- Abu Dhabi Police, Aman service
- UAE Government portal, reporting cybercrimes online
- Google Search Help, removal policies
- Google Search Help, removing content from Google Search and from the web
UAE statutes are read on the official UAE Legislation portal, whose English translations state that the Arabic text prevails. Court awards described on this page are news reports, not citable judgments.
Talk to RepuLex about your matter
Every enquiry is confidential, and an NDA is available before you share any detail. We will tell you which links can come down, by which route, and what your UAE lawyer would need to do.