Hiring a Private Investigator in Dubai: What the Law Allows and Where It Stops

Direct answer. No UAE law we found bans you from paying someone to gather information for you. But the methods most people picture when they hire a private detective in Dubai are crimes in the UAE, whoever carries them out. Article 44 of Federal Decree-Law No. 34 of 2021 on Countering Rumours and Cybercrimes punishes recording people's conversations, photographing people "in any public or private place" and tracking their location, when this is done without consent and with intent to invade their privacy. The penalty is at least six months in prison and/or a fine of AED 150,000 to AED 500,000. Hacking a phone or account, and intercepting messages, are separate offences in the same law. The client is not safe either. Briefing someone to use those methods can make you an accomplice under the Crimes and Penalties Law, and Article 6(3) of the cybercrime law punishes anyone who receives, keeps or uses personal data knowing it was obtained unlawfully. Only the Public Prosecution and Judicial Police Officers (the police and a few other officials listed in the law) have investigative powers, and even a prosecutor needs the Attorney General's approval to record calls. This guide explains what a private investigator can lawfully do, where the law stops them, how to check who you are dealing with, and the official routes to the same evidence.

What a private investigator is, and is not, in the UAE

A private investigator is a private person or company. They have no police powers of any kind.

Under Federal Decree-Law No. 38 of 2022 on Criminal Procedures, the Public Prosecution "shall conduct the investigation into, and prosecution of, criminal offenses" (Article 5). It also has "the exclusive jurisdiction to institute and prosecute the criminal action" (Article 9). Article 34 lists who counts as a Judicial Police Officer: members of the Public Prosecution, police officers and personnel, border and coast guards, port personnel, civil defence officers, and employees given that capacity by law. A private investigator is not on the list.

In practice, that means an investigator cannot:

• arrest, detain, search or question anyone with any legal force
• demand records from a bank, a telecoms company, an employer or a government body
• open a criminal case (only the Public Prosecution can bring one)
• present themselves as police or security personnel

The last point is a crime of its own. Article 299 of the Crimes and Penalties Law (Federal Decree-Law No. 31 of 2021) punishes anyone who unduly assumes a public office. When the person poses as security or police personnel, the penalty is incarceration for one to five years.

Is a private detective in Dubai licensed?

We could not confirm from an official source that "private investigation" is a separate licensed activity in Dubai, or which body would license it. So check the specific firm, and do not rely on what its website says.

Here is what the law text does say:

• Federal level. Federal Law No. 37 of 2006 Concerning Private Security Companies says no company may be established or licensed "to carry out any security services without obtaining the security approval from the competent authority" (Article 3). A security company's work "shall be limited to preventive security protection, and shall not extend to performing the tasks of law enforcement officers" (Article 12). It is also licensed emirate by emirate (Article 9).
• Dubai. Law No. 12 of 2016 Regulating the Security Industry in the Emirate of Dubai says "No Person may provide Security Services in the Emirate without first obtaining a Licence" from the Security Industry Regulatory Agency, SIRA (Article 17). It defines a security service as protection through devices or specialised personnel, security training, selling and installing security systems, and security consultancy (Article 2). That definition does not mention investigation.

Neither text names private investigation. So before you sign anything:

1. Ask for the firm's Dubai trade licence and read the activity it lists.
2. Check that activity with the authority named on the licence. For a Dubai mainland company that is the Department of Economy and Tourism (DET), which took over the licensing role of the Department of Economic Development (Dubai Law No. 20 of 2021, Article 15; Dubai Law No. 13 of 2011, Article 4). For a free-zone company it is that free zone's authority, because free-zone businesses are licensed by their own free zone (Law No. 13 of 2011, Articles 2 and 22).
3. If the firm offers guarding, surveillance equipment or any other security service, ask SIRA whether it holds a SIRA licence.

A trade licence lets a company trade. It does not make an unlawful method lawful, and no licence of any kind gives an investigator police powers.

Where the law stops: the methods that are crimes

Most of the risk sits in one article. Article 44 of Federal Decree-Law No. 34 of 2021 punishes anyone who uses an information network, a system or any IT device "with the intention of invading the privacy or sanctity of private or familial life of someone without his consent in cases other than those authorized by law". A phone camera, a GPS tag or a laptop is enough.

The offline rules point the same way. Article 431 of the Crimes and Penalties Law punishes recording conversations held in a private place or by telephone, and photographing a person in a private place, without consent. It also punishes publishing secrets of a person's private or family life, "even if they are true". In every case the court confiscates the devices used and orders the recordings erased or destroyed. Article 433 adds a fine of at least AED 3,000 for opening someone's letters or eavesdropping on a phone call.

Two words in Article 44 matter: "consent" and "authorized by law". An investigator who says "it is fine, everyone does it" has given you neither. These are general descriptions of the offences, not a ruling on any particular plan. The penalties are those written in the laws as we read them and can be amended, so check the current text on the UAE Legislation portal or with a lawyer.

Your own exposure as the client

People hiring an investigator often assume the risk is the investigator's. The law does not see it that way, and the risk starts with the brief, not when the report arrives.

• Commissioning it. Under Article 46 of the Crimes and Penalties Law, a person who instigates a crime, or agrees with someone to commit it, is an accomplice by causation if the crime is committed as a result, "whether he is in direct contact with the perpetrator or through an intermediary". Article 48 says an accomplice "shall be punished by its penalty, unless the law stipulates otherwise". Briefing an investigator to track, record or hack can therefore expose you to the same penalty as the investigator.
• Receiving the material. Article 6(3) of the cybercrime law punishes anyone who "receives, keeps, or stores" unlawfully obtained personal data, "or accepts to handle or use them despite knowledge of the illegality of acquiring them". If the report on your desk contains a stranger's bank statements or call logs, ask yourself how they were obtained.
• Sharing it. Forwarding a photo, a location history or a screenshot to family, an employer or a group chat can be a fresh offence under Article 44(3) or Article 431. Our guide to WhatsApp rules in the UAE explains why consent to receive is not consent to republish.
• Using it in court. If you hand unlawfully obtained material to a court or the police, you show them how it was gathered. Article 431 orders the recordings destroyed and the devices confiscated.

Anyone who briefs an investigator to track a car or record a spouse is asking for a crime to be committed. Treat that as the line you never cross.

What an investigator may lawfully be able to do

The law does not list "permitted investigator activities". What it does is forbid specific methods. Work that avoids them is lower-risk, but legality still turns on the facts. Lower-risk tasks usually involve:

• Public information. Information a person or company has made public. The Personal Data Protection Law (Federal Decree-Law No. 45 of 2021, in force since 2 January 2022) prohibits processing personal data without consent. It lists exceptions, including data "which has become available and known to all by an act of the Data Subject" (Article 4(2)).
• Willing witnesses. Interviews with people who agree to talk and who are told who is asking.
• Company background checks. Desk research on a company before a deal, using sources that are open to the public.
• Organising your own records. Sorting, dating and indexing documents you already lawfully hold, so a lawyer can use them.

The Personal Data Protection Law also lets data be processed without consent where that "is necessary to initiate any procedures of legal claim or defense of rights" (Article 4(3)). That is a data-protection exception. It does not authorise an act the criminal law forbids. Treat it that way and take advice before relying on it. Businesses that hire investigators also carry their own duties as data controllers; our PDPL compliance guide sets them out.

Lawful routes to the same evidence

The official routes often reach the information an investigator cannot lawfully obtain.

If a crime may have happened

Report it. Article 38 of the Criminal Procedures Law requires anyone who becomes aware of a crime that the Public Prosecution can pursue without a complaint to report it "to the Public Prosecution or a Judicial Police Officer". A victim can also report any crime to either of them. The police and prosecution can then use powers no private person has. Under Article 73, a prosecutor may seize correspondence and search devices, and may monitor and record conversations, but only "subject to prior approval of the Attorney General". If the state needs that approval, a private investigator certainly has no such power.

For online offences, report through Dubai Police's eCrime website, the Ministry of Interior's eCrimes platform or any police station (999 in an emergency), as listed on the UAE Government portal. Our guide to the UAE cybercrime law has the full list of offences and reporting channels.

If you were defrauded, our guide to fraud reporting and penalties in the UAE covers what to file.

If you are in, or about to start, a civil or family case

Ask the court to order disclosure. Under the Law of Evidence in Civil and Commercial Transactions (Federal Decree-Law No. 35 of 2022), the court can order the other side to produce a document it holds (Article 34). It can also bring in a third party to produce a document in its possession, or request a document from a public entity (Article 36). That is how bank or employment records lawfully reach a file. How courts weigh documents, witnesses and digital proof is set out in our guide to UAE civil court evidence rules.

In a divorce, the temptation to have a spouse followed is strongest, and so is the risk of a counter-complaint. Talk to a family lawyer about what the court will need first. Our divorce guide for expats explains the process.

Before you hire anyone: a short checklist

Work through these before money changes hands:

1. Write down the question you need answered. "Where are the company's assets?" and "Is my spouse seeing someone?" lead to very different lawful paths.
2. Ask a lawyer first whether the answer can come through the police, the prosecution or a court order instead.
3. Ask for the firm's trade licence, then check the activity with the authority named on it: DET for a mainland company, the free zone authority for a free-zone company (and SIRA for any security service).
4. Get the methods in writing. Exclude recording, photographing people, tracking, account access and buying personal data.
5. Refuse any report built on those methods, and do not forward or keep it.
6. Agree in writing what happens to the data at the end of the engagement.

If someone offers you a phone's location history or a person's call records for a fee, walk away. That offer describes an offence under Articles 6, 12 or 44.

If you are the person being investigated

If you believe you are being followed, photographed or tracked, or that your accounts were accessed, preserve what you can. Keep screenshots with dates, the tracker device untouched, and the names of witnesses. Then report through the channels above. If a complaint is filed against you instead, for example after you confronted someone, treat it as a criminal matter from the start. Read our guide to arrest rights and criminal defence before giving any statement.

What to do now

The safest route usually starts with a lawyer, not a detective. A UAE lawyer can tell you whether the police, the prosecution or a court order can get what you need, and keep you on the right side of Articles 6 and 44. LEXAI does not list or recommend private investigators. It lists lawyers. You can find and compare criminal lawyers on LEXAI and contact one directly; you engage and pay the lawyer directly, off-platform, on terms you agree with them. To understand the law in plain language before that call, try our AI legal assistant.

This article is general information about UAE law. It is not legal advice on your situation.