Back to Cybercrime & Digital Matters Cybercrime & Digital Matters

Unauthorised Access to Systems and Accounts in the UAE

Accessing a computer system, website, email account or device without permission can be treated as an offence under UAE cybercrime law, even where the person did not intend serious harm. Context and consequences can affect how it is treated.

This guide is for general awareness, not for assessing particular cases.

What "unauthorised" can mean

Access is typically unauthorised when it is without the owner's consent or exceeds the permission given. Using someone's password, bypassing security or continuing to use credentials after permission ended are common examples.

Everyday scenarios

Former employees using old credentials
Partners or relatives checking each other's phones or accounts
Staff accessing records without a business reason
Using shared logins beyond what was agreed

Consequences can escalate

Where access results in copying, altering or deleting data, or in financial loss, additional provisions may apply.

For businesses

Set clear access policies, remove access when staff leave and keep logs. If you suspect misuse, preserve logs and avoid retaliating by accessing the suspect's systems yourself. See digital evidence.

If you are a victim

Change credentials, secure devices, preserve evidence and consider reporting. See reporting cybercrime.

If you are concerned about your own conduct

Do not delete data or contact the other party without guidance. Criminal proceedings involve regulated representation, and a licensed advocate may need to be engaged.

How a consultation can help

A consultation can help you understand the general framework and organise facts. The consultancy does not provide court advocacy and cannot predict how authorities will respond.

Frequently asked questions

Is checking a spouse's phone an offence?

It can create legal risk if done without permission, and privacy rules may apply. Seek guidance rather than assuming it is acceptable.

Can an employer monitor employees?

Monitoring is subject to rules on privacy and data protection and should be disclosed in policies.

What if I had been given the password?

Permission matters, but its scope and whether it was withdrawn also matter.

Related guides and services

General information only. Please read our Legal Disclaimer.