HAS Law Firm | View firm profile
The United Arab Emirates is no longer simply a strong aviation market. It is building a legal and industrial ecosystem for civil aviation, drones, defence technology and next-generation aerospace. That is visible not just in legislation, but in the market itself. Dubai Airshow 2025 described a week of breakthroughs, strategic partnerships and industry-shaping discussions. EDGE said it unveiled 42 new products there across air, space, autonomy, propulsion, radar and secure communications; and the UAE’s sustainable aviation fuel policy targets 700 million litres of domestic SAF production annually by 2030.
For lawyers, investors, OEMs, MRO providers, drone operators and defence contractors, the real point is this: the UAE is not difficult because it is overregulated. It is difficult because civil aviation, dual-use controls, defence licensing and foreign ownership rules can overlap in the same project. The framework is anchored in the Civil Aviation Law, which official sources now describe as amended by Federal Decree-Law No. 12 of 2024, the GCAA Law of 1996, the 2022 drone law, the 2021 non-proliferation controls law and its 2024 executive regulations, the 2019 weapons and military materiel law, and the 2021 strategic impact regime.
- Civil aviation in the UAE is mature, but it is not static
The civil side of the regime is relatively legible. The Civil Aviation Law remains the foundation of the UAE aviation framework, while the GCAA remains the federal authority responsible for executing that law. But the mistake outsiders make is assuming that “mature” means “settled.” Official UAE sources now refer to the Civil Aviation Law as amended in 2024, which is a reminder that this framework continues to evolve alongside the industry it regulates. For market participants, the real legal question is not abstract sovereignty over airspace. It is licensing, operating permissions, continuing airworthiness, training, safety supervision and regulatory timing.
One technical point is worth stating plainly because professionals care about it and non-specialists often miss it: the official English legislation portal itself says the Arabic text prevails in the event of inconsistency. In this sector, that matters. When the question is scope, penalty, or classification, translation is not a clerical issue; it is a legal one.
- Drones are not a side issue anymore
The UAE’s drone framework is one of the clearest signs that aerospace regulation is moving from aircraft law to airspace management. Federal Decree-Law No. 26 of 2022 applies to all UAVs and related activities across the UAE, including free zones, and assigns the GCAA a central role in creating a unified register and approving the conditions for permits and certificates. That is already more than hobby regulation. It is the architecture of a managed operating environment.
The penalties confirm the seriousness of the regime. Operating activities without registration can attract fines of AED 50,000 to AED 500,000. Conducting design, manufacture, testing, trading or related commercial activities without the required licence or permit can trigger fines of AED 100,000 to AED 2,000,000. More serious conduct, including operations in restricted or prohibited areas or conduct jeopardising airspace safety, can lead to imprisonment of six months to five years and or fines up to AED 1,000,000.
What makes the UAE interesting is that the regime is strict in theory and granular in practice. The GCAA’s operational rules for individual users require registration, confine smaller recreational drones to approved zones, require line-of-sight operations, cap altitude at 400 feet above ground, limit flying to daytime and good weather, and prohibit operations within 5 km of airport perimeters. More recent GCAA recreational rules also point pilots to accredited training and the UAE Drones platform. In parallel, the regulatory conversation has already moved to U-space service providers at federal level and U-space airspace in Dubai’s 2025 UAS regulation. In other words, the UAE is not merely permitting drones; it is building traffic rules for them.
- The real legal dividing line is export control
Many aerospace businesses assume they are safely on the civil side of the fence until a software module, sensor, propulsion component, encryption feature, maintenance dataset or engineering support package pushes them into dual-use territory. That is where the UAE’s non-proliferation regime matters. Cabinet Resolution No. 97 of 2024, the executive regulation under Federal Decree-Law No. 43 of 2021, defines “permit” in a way that reaches import, export, re-export, transshipment, in-transit shipping, transport between ports and brokerage. Even the structure of the executive regulation is revealing: it contains dedicated articles on records keeping, inspection procedures, seizure, detainment of commodities and appeals. This is not symbolic legislation. It is a functioning compliance system.
The territorial point matters too. The law applies across the UAE, including free zones. That single detail is enough to upset a common assumption that a free zone structure somehow neutralises export-control risk. It does not. In practice, the harder questions are often not about shipping a finished product out of the country, but about technical data, end-user documentation, re-export chains, brokerage arrangements and whether a transaction has drifted from “commercial aviation support” into a controlled technology transfer.
- Defence regulation in the UAE is a national security regime, not just a sectoral one
Federal Decree-Law No. 17 of 2019 is broader and sharper than many readers expect. “Military materiel” is defined to include aircraft, boats, submarines, machinery, equipment, devices, unmanned systems, ammunition, explosives and weapons used for military purposes, as well as related parts, spare parts, technology and manufacturing devices. That definition matters because it collapses the comfortable distinction between a finished platform and the technology stack behind it.
The operational reach of the law is equally broad. Article 3 provides that possession, acquisition, carrying, import, export, re-export, transit, trans-shipment, trade, manufacture, repair, transportation and disposal of weapons, ammunition, explosives, military materiel and hazardous substances are not permitted without the relevant licence or permit. The licensing authority may refuse to grant or renew licences and may add restrictions, and the law establishes a dedicated Weapons and Hazardous Substances Office within the national security structure. This is exactly the point at which a conventional commercial mindset becomes dangerous: in the UAE defence space, regulatory discretion is part of the system, not an exception to it.
The penalty landscape is even more revealing. Unlicensed trading in, importing, exporting or manufacturing explosives or military materiel can trigger temporary imprisonment and a fine of at least AED 500,000. The unauthorised leakage or publication of plans, drawings, documents, information or data relating to weapons, ammunition, explosives or military materiel can attract life imprisonment and a fine of at least AED 500,000. Even repair activity without a licence is criminalised. For defence contractors and technology suppliers, the message is obvious: this is not a back-office licensing exercise; it is a core national-security compliance issue.
- Foreign ownership is liberal in the UAE, except where it is not
The UAE has rightly advertised its openness to full foreign ownership across much of the economy. Official government guidance confirms that foreigners can establish companies with 100 percent ownership in many mainland activities. But aerospace and defence readers should focus on the carve-out, not the headline. Cabinet Resolution No. 55 of 2021 places security, defence and activities of a military nature on the list of “strategic impact” activities. For those activities, the Ministry of Defence and Ministry of Interior may determine not only the percentage of national participation in capital, but also the percentage of national participation on the board. That is a sophisticated control tool, and it tells you everything about how the UAE balances investment openness with sovereign oversight.
This is why structuring questions in the UAE cannot be left to corporate housekeeping at the end of a transaction. The ownership analysis may change depending on whether the activity is genuinely civil, dual-use, defence-adjacent or plainly military. Free zone location, shareholder mix, board composition, licensing sequence and the identity of the actual operating entity all matter. The legal issue is not simply “Can a foreign investor own this?” It is “What exactly is the regulated activity, and who gets to say so?”
- The most interesting part of the UAE story is that policy, industry and regulation are moving together
This is what makes the market more dynamic than a dry statute-by-statute summary suggests. On the civil side, the UAE’s 2023 sustainable aviation fuel policy aims to raise domestic SAF production capacity to 700 million litres annually by 2030, support research and development, create a national regulatory environment for production plants and build in-country value. The GCAA also states that its CORSIA implementing decree was the first legislation of its kind in the Arab region approved by the PMO. That is not a country sleepwalking into compliance. It is a country trying to shape regional practice.
On the defence side, the industrial narrative is equally visible. Dubai Airshow 2025 described a week of breakthroughs, partnerships and industry-shaping discussions, while EDGE said it unveiled 42 new products across air, space, autonomy, propulsion, radar and secure communications, and that more than 53 percent of its revenue was export-driven. Even allowing for the promotional character of a company release, the strategic direction is clear: the UAE is building industrial depth, not merely acting as a procurement market. That matters legally because industrial depth generates more IP, more technology transfer, more data movement, more export-control touchpoints and more security review.
Conclusion
The UAE’s aerospace and defence framework is best understood as a system of classification and sequencing. Classification, because the outcome depends on whether a product or service is civil, unmanned, dual-use, defence-related or strategically sensitive. Sequencing, because approvals obtained in the wrong order can damage timetable, structure, cost and sometimes the viability of the deal itself. The businesses that succeed in this market are usually the ones that map those issues early: they classify products and data, separate civil from defence support, check export-control implications before sharing technology, address ownership and board constraints at the structuring stage, and treat drone operations as aviation activity rather than consumer tech. The UAE is open for aerospace and defence business. It is simply not casual about it.
Authors
Ilya Dvorkin
Partner, HAS Law Firm
Samara El Doukhei
Paralegal, HAS Law Firm