Every UAE online sale rests on two pillars of law that most merchants never read: one that makes the click legally binding, and one that decides what happens when the parcel disappoints. Understanding how Federal Decree-Law No. 46 of 2021 and Federal Law No. 15 of 2020 interlock is now a condition of trading, not a compliance afterthought.
The contract behind the click
An e-commerce transaction is a contract formed without ink, presence or paper. For decades the anxiety was whether such a contract could bind at all. Federal Decree-Law No. 46 of 2021 on Electronic Transactions and Trust Services settled the question with a clear principle of functional equivalence: an electronic record, signature or contract is not to be denied legal effect merely because it is in electronic form. The checkout confirmation, the emailed invoice, the logged acceptance of terms — each can carry the same evidential weight as a wet-ink counterpart, provided the statutory conditions are met.
The Decree-Law does more than validate signatures. It builds a tiered architecture of trust. An ordinary electronic signature sits at one end; a qualified or "approved" electronic signature, backed by a certificate from a licensed trust service provider, sits at the other, attracting the strongest presumption of reliability. It also regulates electronic seals, time-stamps, certified website authentication and qualified electronic delivery services — the plumbing of a digital economy — and places their providers under a licensing and supervisory regime administered federally. For a merchant, the practical takeaways are concrete: the record-keeping obligations require that a document be retained in a form that accurately reproduces the original and remains accessible, together with the information identifying its origin, destination and the date and time of transmission. Get the retention architecture wrong and an otherwise valid contract becomes difficult to prove.
The consumer's charter
If Decree-Law No. 46 makes the deal enforceable, Federal Law No. 15 of 2020 on Consumer Protection decides whether the merchant may keep the benefit of it. The statute codifies a suite of consumer rights — to safe goods, to accurate information, to the declared price, and to redress for defects — and imposes correlative supplier obligations. Crucially, it reaches goods sold through e-commerce platforms registered in the UAE, and its Executive Regulation, Cabinet Resolution No. 66 of 2023 (in force since 14 October 2023), translates those principles into operational rules that speak directly to distance selling.
The law that makes the click binding and the law that lets the buyer unwind it are two halves of one obligation; treat them separately and you comply with neither.
Distance selling in practice
The Executive Regulation converts abstract rights into a checkout-page checklist. Before purchase, an online seller is expected to disclose the material terms plainly — total price in dirhams, delivery timeframe, and the return and warranty position — so the consumer contracts on an informed basis rather than discovering the terms after payment. The regime addresses the specific pathologies of online buying:
- Order cancellation — a consumer generally retains the ability to cancel before dispatch, and undue delay against the promised delivery window can crystallise a right to cancel and be refunded.
- Non-conforming goods — items that do not match the description or image presented online may be returned, with the cost of that return falling on the supplier rather than the buyer.
- The repair-or-replace cycle — a supplier may elect between repair and replacement for a defect, but cannot cycle indefinitely; at a point the consumer's entitlement to a refund hardens, and warranty periods extend to reflect time the consumer was deprived of use.
- Price and discount transparency — misleading pricing is curtailed, and where a discount is offered shortly after purchase the price difference may be recoverable.
- Prohibited exclusions — a term purporting to relieve the supplier of a statutory obligation is void, whether buried in a click-wrap contract, an invoice or a terms page.
Enforcement sits with the Ministry of Economy, working alongside the relevant emirate-level departments of economic development. Its posture is increasingly active: complaint channels, published penalties and coordinated inspection give the paper rights real teeth. For a marketplace, the exposure is compounded — platform operators cannot assume that framing themselves as a neutral intermediary insulates them from the consumer-facing obligations attaching to sales concluded through their infrastructure.
The wider perimeter
E-commerce is never governed by two statutes alone. Digital payments engage the Central Bank's regulatory perimeter, so the payment interface a merchant integrates carries its own licensing and consumer-facing expectations. Marketing has become a regulated activity in its own right: advertising and influencer promotion now sit within a media-licensing framework, with an advertiser permit administered by the UAE Media Council taking effect from 1 February 2026 for paid and, in defined circumstances, unpaid promotional content — a material change for brands that rely on creator partnerships.
Three further regimes run in parallel and should be mapped deliberately. Data protection — principally the federal personal data protection framework introduced in 2021 — governs the customer information every storefront collects, and the Consumer Protection Law independently restricts the exploitation of consumer data for marketing. The cybercrime framework criminalises online fraud and the misuse of electronic systems, shaping both liability and the seller's own security duties. And the tax layer is tightening: VAT already applies to most supplies, and the phased move toward mandatory e-invoicing on a Peppol-based model, beginning on a voluntary footing in 2026, will make invoice format and transmission a compliance obligation rather than a bookkeeping preference. Cross-border selling adds a jurisdictional caveat — content and offers directed at UAE consumers can attract local rules even where the seller sits abroad, though the Consumer Protection Law's reach is calibrated to platforms and businesses with a UAE nexus.
A practical strategy
For an online business the discipline is integration, not box-ticking. Build the trust and record-keeping requirements of Decree-Law No. 46 into the transaction flow so that consent, contract and invoice are captured in a durable, reproducible form from the first sale. Rewrite pre-purchase disclosures and returns policies against the Executive Regulation rather than importing foreign templates, and strip out any exclusion clause the law would treat as void. Marketplaces should assume a share of the consumer-facing risk and contract with sellers accordingly. Layer data-protection, payments, advertising-permit and tax compliance onto the same operational spine, and revisit it as the e-invoicing and media-licensing timelines mature through 2026. Handled together, these are not frictions on growth; they are the conditions on which durable, defensible digital trade in the UAE is built.
Instruments referenced: Federal Decree-Law No. 46 of 2021 on Electronic Transactions and Trust Services; Federal Law No. 15 of 2020 on Consumer Protection and its Executive Regulation (Cabinet Resolution No. 66 of 2023). Ancillary data-protection, cybercrime, payments, VAT/e-invoicing and media-licensing regimes are noted at a general level and were current at the date of writing. This is general information, not legal advice.