United Arab Emirates - Future Projects Regulation (25/2018)

Overview

Federal Decree‑Law No. (25) of 2018 on the Projects of Future Nature creates an enabling legal pathway for the controlled introduction and pilot implementation of innovative projects based on advanced or future‑oriented technologies, including the use of artificial intelligence, where no specific federal regulation exists. The Decree expressly authorises the UAE Cabinet to grant provisional licences and to set the necessary conditions, controls and procedures for such licences, including time‑limited exemptions from other federal laws to the extent required for safe operation of the project. The text is intentionally concise and permissive; detailed operational requirements and licensing procedures have been established in follow‑on Cabinet instruments such as the Resolution creating the Legislation Lab and rules governing provisional licences (Federal Decree‑Law No. (25) of 2018 (EN), Cabinet Resolution: Provisional Licences / Legislation Lab). The instrument serves as a legal bridge between rapid technological innovation and the slower process of drafting tailored legislation, enabling pilots while authorities assess risks and develop permanent regulatory regimes.

Definitions

Key terms used in the enabling instruments and implementing resolution include (a) "Innovative Project" – a project applied using modern or future‑character technologies or AI for which no organized legislation exists in the State; (b) "Provisional License" – a temporary permit issued to allow controlled experimentation; (c) "Legislation Lab" – a Cabinet‑level or designated body tasked with assessing applications, setting conditions and monitoring pilots; (d) "Licensee" – the natural or legal person granted the provisional license. These definitions are set out and elaborated in the implementing Cabinet Resolution and the official legislative portal (Cabinet Resolution (English)).

Governance and Institutional Framework

The Decree‑Law vests authority in the UAE Cabinet (Council of Ministers) to design and operate the provisional licensing regime. The Cabinet may create dedicated institutional arrangements—commonly referred to as a "Legislation Lab"—to fulfill intake, evaluation, oversight and reporting functions. The implementing resolution outlines the role of the Legislation Lab in receiving applications, assessing technical, financial and legislative feasibility, recommending conditions, and supervising temporary exemptions. Ministries and competent authorities remain responsible for sectoral oversight, risk assessment, and any technical approvals required; national security, public safety, and other designated bodies retain review powers. The governance model emphasises cross‑agency coordination, requiring joint assessments where projects intersect multiple regulatory domains (e.g., health, transport, telecommunications). The Cabinet's authority to grant temporary exemptions is constrained by the requirement that such exemptions be time‑limited and proportionate, and that they serve the objective of enabling a transition to permanent regulation once risks are assessed (Decree‑Law text, Cabinet implementing Resolution).

Key Focus Areas

The enabling framework focuses on several interrelated policy and technical concerns: (1) Risk assessment and mitigation — applicants must provide comprehensive feasibility and impact studies covering technical, social, environmental, economic and legislative effects; (2) Safety and testing — pilot conditions normally mandate staged testing, safety protocols and predefined success/failure criteria; (3) Data governance — projects using personal data or AI are expected to adhere to applicable data protection principles and to coordinate with data protection authorities where relevant; (4) Transparency and reporting — licence holders must provide periodic reports to the Legislation Lab and competent authorities and enable audits; (5) Time‑limited exemptions and transition planning — licences are temporary and typically require a pathway to permanent legal compliance, informing law‑making; (6) Accountability and liability — projects must identify responsible entities and provide mechanisms to address harms, including remediation and insurance arrangements; (7) International coordination — where projects implicate cross‑border data flows or multinational service providers, the regime contemplates alignment with international norms and bilateral arrangements. These focus areas are reflected in the Cabinet Resolution's application criteria and assessment checklists and are designed to ensure that experimental deployments do not undermine public interests while enabling innovation and learning for regulators (Cabinet Resolution).

Implementation Framework

Implementation operates through a two‑stage administrative process: (1) Application and assessment — prospective licensees submit a dossier demonstrating financial, technical and operational feasibility, plus a comprehensive impact assessment (technical, social, environmental, economic and legislative). The Legislation Lab (or designated Cabinet body) evaluates the dossier and recommends specific licence conditions, monitoring requirements and any temporary exemptions. (2) Licence issuance and oversight — the Cabinet approves and issues provisional licences with clearly defined scope, duration and conditions; Ministries and sector regulators execute on‑site oversight, require safety testing, and monitor compliance with reporting obligations. The implementing rules also enable revocation or suspension of licences for non‑compliance or where public interest requires, and require that projects be used to inform drafting of permanent laws. The Cabinet's implementing texts provide templates and guidance on expected deliverables, audit rights and reporting cadence (Implementing Resolution and Legislation Lab).

Monitoring and Evaluation

Monitoring is central to the regime: licensees are typically required to submit periodic technical and impact reports, incident reports, and data needed for audits. The Legislation Lab coordinates cross‑agency reviews and consolidates lessons learned to inform permanent legislation. Evaluation metrics include safety incidents, socio‑economic impact, compliance with privacy and security obligations, interoperability issues and scalability potential. Where pilots reveal unacceptable risks, the Cabinet may amend licence conditions, suspend the pilot or require corrective actions. The implementing instruments empower the authorities to collect necessary evidence to support legislative drafting and to recommend safeguards (technical, procedural and contractual) for future regulation (Cabinet Resolution).

Penalties, Liability, and Appeals

The Decree‑Law itself does not prescribe detailed criminal or pecuniary penalties, but it grants the Cabinet authority to set conditions and to suspend or revoke provisional licences. Implementing resolutions and sectoral laws govern civil liability, administrative sanctions and any criminal liability arising from unlawful acts. License agreements typically include obligations to indemnify, to maintain insurance, and to remediate harms. Affected parties retain the right to pursue civil remedies under existing UAE laws; administrative decisions (e.g., licence refusal, suspension) are subject to applicable administrative review and judicial remedies in line with UAE procedural law. In practice, the combination of provisional licence conditions, sectoral penalties and general civil liabilities constitutes the enforcement backbone for the regime (Decree‑Law, Cabinet Resolution).

Relationship to Other Instruments

The Decree‑Law functions as a horizontal enabling instrument and interacts with a range of sectoral and cross‑cutting laws: data protection regimes, telecommunications and electronic transactions laws, health and medical regulation, transport and aviation regulation, financial services laws, and national security frameworks. It explicitly allows temporary exemptions from federal legislation "to the extent necessary" to implement approved projects and therefore must be read alongside the specific sectoral laws that will ultimately regulate the activity once permanent legislation is adopted. Implementing resolutions, ministerial decisions and sectoral rules set the operational details and ensure that provisional authorisations do not permanently displace sectoral safeguards (Decree‑Law, Cabinet implementing Resolution).

International Alignment

The provisional licensing approach is consistent with international regulatory trends that favour controlled experimentation (regulatory sandboxes, pilot licences) for disruptive technologies. The UAE's model aligns with practices in other jurisdictions that use time‑limited exemptions and sandbox frameworks to balance innovation and safety. Where pilots implicate cross‑border data flows or services, authorities expect compliance with international data protection standards, export controls, and mutual legal assistance frameworks. The regime also encourages international cooperation and benchmarking to adopt technical standards and to ensure interoperability for projects with global scope (Decree‑Law text, comparative materials and Cabinet guidance).

Implementation Timeline

Sources and References