Legal Pages Every UAE Website Needs in 2026 (Fines Start at AED 100,000)

Short answer: a UAE website that sells anything needs seven legal blocks live before launch: terms of sale, a PDPL privacy notice with cookie consent, a returns and refunds policy, a warranty statement, VAT-inclusive pricing with your TRN on invoices, a stated delivery window, and a named complaints channel with your trade licence details. Under Cabinet Decision No. 66 of 2023, missing pieces are not warnings - they are scheduled fines from AED 100,000 to AED 1,000,000. The cheapest one on the list, an invoice that is not issued in Arabic, costs AED 100,000.

Key takeaways

• 46 fineable violations are itemised in Cabinet Decision 66/2023, the executive regulation of the UAE Consumer Protection Law, ranging from AED 100,000 to AED 1,000,000.
• Arabic is not optional. Failure to issue the invoice in Arabic (Article 8(4)) carries a flat AED 100,000 penalty. So does failing to hand over a warranty document.
• Enforcement is real and rising. The Ministry of Economy and Tourism ran 155,218 inspection visits in 2025 and documented 7,702 violations. In just the period 28 February to 17 March 2026 it issued 729 warnings and 216 penalties of AED 2,000 to AED 200,000.
• New in 2026: under Cabinet Decision No. 107 of 2026 (anti-commercial-fraud), a notified seller must pull a product within 24 hours and publish a bilingual notice within 48 hours. Your CMS needs a kill switch, not a developer ticket.
• Tax side: displaying prices exclusive of VAT is a AED 5,000 penalty, and failing to issue a tax invoice is AED 2,500 per detected case under Cabinet Decision 49 of 2021.

Why this suddenly matters: 11 million shoppers and an inspectorate with AI

The UAE e-commerce market is worth about USD 12.42 billion in 2026 and is forecast to reach USD 21.01 billion by 2031, a CAGR of roughly 11.3%. There are around 11.04 million online shoppers in the country, and 78.67% of 2025 transaction volume came from smartphones. Selling online in the Emirates is no longer a side channel, so it is no longer regulated like one.

The oversight numbers moved in step. The Ministry of Economy and Tourism carried out 155,218 inspection visits during 2025, documenting 7,702 violations, and handled 3,167 consumer complaints with a 93.9% resolution rate. Between 28 February and 17 March 2026 alone it logged 8,168 inspection visits, 729 warnings and 216 penalties in the AED 2,000 to AED 200,000 band, plus 2,441 complaints in under three weeks. The Ministry has also confirmed it is using smart monitoring and AI to scan open sources and electronic platforms for commercial-fraud signals - which means your product pages are readable by a regulator at scale, without anyone visiting your warehouse.

Two federal instruments frame what has to be on the page. Federal Decree-Law No. 14 of 2023 on Modern Technology-based Trade replaced the 2006 e-commerce law and covers selling through websites, apps, marketplaces and social media - explicitly layering in Central Bank rules for payment gateways, Federal Tax Authority rules, TDRA rules and cybersecurity requirements. Federal Law No. 15 of 2020 on Consumer Protection, with its executive regulation Cabinet Decision No. 66 of 2023, then prices each failure.

The seven legal blocks a UAE website needs in 2026

Most Dubai businesses treat legal pages as a footer formality copied from a US template. The template is the problem: it is written against US or EU law, it never mentions Arabic, VAT, TRN or a UAE trade licence, and it quietly omits the two things a UAE inspector looks for first.

Block	What it must actually contain	Basis	Exposure if missing
Terms of sale	Trader identity, licence and jurisdiction, contract formation point, all-inclusive price in AED, cancellation rules	Decree-Law 14/2023	Licensing and disclosure action
Privacy notice + cookie consent	Purposes, legal basis, retention, cross-border transfer, data-subject request route, real consent for non-essential cookies	PDPL 45/2021	Federal data-protection penalties
Returns and refunds	How to claim, who pays return shipping, and the statutory 14-day window for defective goods	Law 15/2020 + CD 66/2023	Up to AED 1,000,000 (Art. 24(2))
Warranty statement	A warranty document the customer actually receives, plus periodic maintenance terms where applicable	CD 66/2023 Art. 11 and 18	AED 100,000; AED 300,000 for maintenance
Pricing and VAT	Prices displayed inclusive of 5% VAT; tax invoice carrying your TRN issued on every supply	CD 49/2021	AED 5,000 + AED 2,500 per case
Delivery and shipping	A stated delivery window, the right to cancel before dispatch, and the right to cancel and refund on significant delay	Law 15/2020 + CD 66/2023	Refund orders and penalties
Contact and complaints	Legal entity name, trade licence number, physical UAE address, phone, email, escalation route	Decree-Law 14/2023	Disclosure violation

None of that is a lawyer-only job. Six of the seven are content and code decisions made by whoever builds the site - which is precisely why they get skipped.

The Arabic clause that catches almost every Dubai store

This is the myth worth busting. Founders assume an English-only site is fine because Dubai runs on English. The invoice is a different object from the website. Under Article 8(4) as penalised in Cabinet Decision 66/2023, failure to issue the invoice in Arabic is a AED 100,000 fine. You may add English alongside it - you may not replace it. The practical consequence is a templating task: your checkout, your payment-gateway receipt and your ERP or accounting export all need an Arabic invoice layout, with Arabic labels, correct RTL rendering and a font that does not collapse when the PDF is generated. If you are already localising the storefront, our Arabic website localisation and RTL guide covers the front-end half of the same problem.

New for 2026: the 24-hour product-withdrawal rule

Federal Decree-Law No. 42 of 2023 on Anti-Commercial Fraud got its executive regulation in Cabinet Decision No. 107 of 2026, in force from roughly mid-August 2026. The mechanic matters for anyone running a catalogue: once officially notified, a supplier must stop selling and withdraw the product within 24 hours, and publish a public announcement in Arabic and English within 48 hours, with faster timelines where health or safety is involved. The framework explicitly extends to e-commerce platforms, and the Ministry can require a platform to withdraw a listing or display a warning message.

Translate that into engineering. If pulling one SKU across your store, your app, your Google Merchant feed, your Noon or Amazon listing and your cached CDN pages takes a developer three days, you cannot meet a 24-hour obligation. What a compliant build has is a single product-status flag that cascades everywhere, plus a pre-built recall notice template in both languages. That is a half-day of work before you need it, and a crisis after.

The fines, ranked by how easily they happen

Violation	Instrument	Penalty (AED)
Invoice not issued in Arabic	CD 66/2023, Art. 8(4)	100,000
No warranty document provided	CD 66/2023, Art. 11	100,000
No periodic maintenance for warranted goods	CD 66/2023, Art. 18	300,000
Failure to advise of potential harm or protective measures	CD 66/2023, Art. 20	500,000
No replacement or refund on recurring warranty failure	CD 66/2023, Art. 28(1)	500,000
Closing a return file without permission	CD 66/2023, Art. 24(2)	1,000,000
Prices not displayed inclusive of VAT	CD 49/2021	5,000
Failure to issue a tax invoice	CD 49/2021	2,500 per detected case

Note the shape of that list: the expensive entries are all process failures after a sale, and the cheap entries are all page-level failures before one. A website cannot stop you mishandling a return, but it can stop you from ever displaying a VAT-exclusive price or issuing an English-only invoice. Fix the machine-made mistakes first.

What it costs to get compliant in Dubai

These are the ranges we quote for compliance work on an existing site in 2026. All figures exclude 5% VAT.

Work item	Scope	AED range	Timeline
Legal-page pack (EN)	Terms, privacy, returns, warranty, delivery, complaints - written against UAE law, not a US template	2,500-6,000	3-5 days
Arabic versions + RTL	Professional AR translation of all legal pages, RTL layout, correct typography	4,000-9,000	1-2 weeks
Arabic tax-invoice templating	Arabic invoice layout with TRN, VAT breakdown, PDF font handling, gateway and ERP hookup	3,000-7,500	4-8 days
VAT-inclusive pricing fix	Storefront, cart, feeds and ads pricing rewritten to display tax-inclusive AED	1,500-4,500	2-4 days
PDPL consent manager	Real cookie consent with category blocking, consent log, data-request workflow	2,000-5,000	3-6 days
24-hour withdrawal kill switch	Single product-status flag cascading to site, app, feeds and CDN, plus bilingual notice template	3,500-8,000	1 week

A full pass on a typical Dubai SME store lands at AED 12,000-30,000 - against a single Arabic-invoice penalty of AED 100,000, or a return-handling penalty of up to AED 1,000,000. The arithmetic is not subtle. Add the commercial upside: clear delivery windows, a visible refund policy and a named local contact are exactly the trust signals that lift checkout conversion in a market where 78.67% of transactions happen on a phone screen, where nobody reads a footer twice.

How Aquarius handles it

We audit against the article, not against a vibe. Every build we ship goes out with the seven blocks live, bilingual where the licence or audience calls for it, the Arabic invoice template wired into the payment gateway, prices rendering VAT-inclusive at every surface including feeds, and a product-status flag that can pull a SKU everywhere in one click. We hand over the source, the hosting accounts and the document templates on day one, so your accountant and your lawyer can amend them without calling us.

If you only do one thing this week, open your own checkout, complete a real order, and look at the invoice PDF that arrives. If it is English-only, you are carrying a AED 100,000 exposure that takes about a day to remove. See our pricing, what each service covers, the UAE PDPL compliance checklist for the data-protection half, or the VAT and e-invoicing guide for what changes in 2027.

This article is practical guidance for website and app owners, not legal advice. Confirm your specific obligations with a UAE-licensed legal or tax adviser before relying on it.

FAQ

What legal pages are required on a UAE website in 2026?

Seven: terms of sale, a PDPL privacy notice with cookie consent, a returns and refunds policy, a warranty statement, pricing and VAT disclosure with TRN, a delivery and shipping policy with a stated window, and a contact and complaints page carrying your legal entity name, trade licence number and UAE address. They derive from Federal Decree-Law 14/2023, Federal Law 15/2020 with Cabinet Decision 66/2023, PDPL 45/2021 and Cabinet Decision 49/2021.

Does a UAE website have to be in Arabic?

The website itself is not universally mandated to be bilingual, but the invoice must be issued in Arabic - failure carries a AED 100,000 penalty under Cabinet Decision 66/2023, Article 8(4). Public recall or withdrawal notices under the 2026 anti-fraud regulations must be published in both Arabic and English. In practice, most UAE stores translate legal pages and invoices first, then the storefront.

What is the return period for online purchases in the UAE?

There is a 14-day statutory window to claim repair, replacement or refund for defective goods, applying across sectors. Separately, consumers can cancel an online order before dispatch, and goods that do not match the description or image on the site can be returned at the supplier's expense. Delivery must happen within the window stated at the point of sale; a significant delay gives the consumer a right to cancel and be refunded.

Do I have to show prices including VAT on my UAE website?

Yes. Consumer-facing prices must be displayed inclusive of 5% VAT, and adding VAT at the till or checkout on top of an advertised price is a documented failure. The administrative penalty is AED 5,000 under Cabinet Decision 49 of 2021, and failing to issue a tax invoice is AED 2,500 for each detected case.

How much are the fines for missing legal pages in the UAE?

Cabinet Decision 66/2023 itemises 46 financial penalties from AED 100,000 to AED 1,000,000. Separately, DED-level consumer-protection fines run from AED 10,000 upward, and the Ministry of Economy and Tourism issued 216 penalties in the AED 2,000-200,000 band in under three weeks in early 2026. Serious cases can also draw temporary closure of up to 90 days or licence cancellation.

What is the 24-hour rule for online sellers in the UAE?

Under Cabinet Decision No. 107 of 2026, implementing the Anti-Commercial Fraud law (Federal Decree-Law 42/2023), a supplier who is officially notified about non-compliant or counterfeit goods must stop selling and withdraw them within 24 hours, and publish a public announcement in Arabic and English within 48 hours. It applies to e-commerce platforms as well as physical retailers, so your store needs a one-click way to pull a listing everywhere.

Can I reuse a US or UK terms-and-conditions template?

Not safely. Imported templates reference the wrong jurisdiction and consumer law, omit the Arabic invoice obligation, say nothing about VAT-inclusive AED pricing or your TRN, and rarely name a UAE legal entity, trade licence or local address - which is the exact disclosure set a UAE regulator checks first.

Not sure which of the seven blocks your site is missing? Send us your URL and we will send back a marked-up compliance audit with the article reference against each gap - usually within 48 hours.