Is AI Cold Calling Legal in the UAE? The 2026 TDRA Rules Every Business Must Know

Is AI cold calling legal in the UAE?

The direct answer is yes — with conditions. Outbound telemarketing using an AI voice system is a lawful activity in the UAE, provided every call meets the framework set out in Cabinet Resolution No. 56 of 2024 (the rules) and enforced under Cabinet Resolution No. 57 of 2024 (the penalties). The UAE chose to regulate outbound AI calling rather than ban it — which is the right call for a market that runs on telephone commerce.

There is, however, an important distinction that changes the compliance picture entirely for many businesses: calls initiated by a customer — inbound enquiries, WhatsApp messages, form submissions that trigger a callback within seconds — are exempt from the outbound telemarketing rules. Only unsolicited, business-initiated outbound calls to people who have not recently raised their hand are in scope. We cover that exemption in detail below.

What are the 7 outbound obligations under TDRA rules?

Cabinet Resolution 56 of 2024 sets out a clear checklist for any business running outbound calls — whether those calls are made by a human agent or an AI. Every obligation applies equally to AI-powered campaigns. Here is each rule in plain terms:

1. Prior TDRA approval. You must obtain approval from the Telecommunications and Digital Government Regulatory Authority before launching an outbound telemarketing campaign. This is the prerequisite — not a formality to complete after going live.
2. DNCR screening before every dial. Every number must be checked against the UAE's Do Not Call Registry before the call is placed. A number registered on the DNCR must not be dialled, regardless of any prior commercial relationship. This check must happen per call, not once at campaign launch.
3. Calling window: 09:00 – 18:00 only. Outbound telemarketing calls are prohibited outside this window, seven days a week. There is no weekend exception and no Ramadan carve-out under the Resolution text — calls must fall within the window. See our full guide to the 9-to-6 rule for implementation detail.
4. Caller ID registered to the trade licence. The originating number must be registered to the business's commercial trade licence. Spoofed, withheld, or unregistered numbers are a standalone offence under Resolution 57.
5. Call recording with caller notification. Every outbound call must be recorded, and the person being called must be notified that the call is being recorded. The recording must be retained for the period required under UAE telecom law (the Resolution does not fix a specific number of days — check with your legal adviser).
6. Maximum 2 call attempts per number per 7-day window. If a number does not answer or does not convert after two attempts within any rolling seven-day period, it must be rested. Repeat dialling beyond this limit is a violation.
7. Same-day lockout after a hard refusal. If the person answers and clearly refuses further contact, the number must be locked out immediately — no follow-up call on the same day. A refusal is not an instruction to try again later that afternoon.

Does the inbound exemption apply to my business?

This is the question most businesses get wrong. The outbound telemarketing rules in Resolution 56 apply to unsolicited calls initiated by a business to a contact who did not request that specific call. They do not apply to a call that is a direct, prompt response to a customer's own action.

In practice: if a person submits a form on your website, sends a WhatsApp enquiry, or clicks "Request a callback" — and your AI system calls them within seconds of that action — that call is responding to the customer's initiation. It is not an unsolicited outbound call under the Resolution's framework. The DNCR screening, 09:00–18:00 window, and prior-approval requirements do not apply to it.

This distinction covers the primary use case for AI voice agents across UAE clinics, real estate brokerages, and service businesses. The DNCR and outbound AI calls guide covers how to classify your specific call types and build the right workflow around each.

Does a UAE AI caller have to identify itself as an AI?

This is where UAE law is precise in some respects and silent in others. Resolution 56 requires that an outbound telemarketing agent identifies the business name and the purpose of the call at the start of every call — that obligation applies whether the agent is human or AI.

What Resolution 56 does not do is mandate a blanket announcement that the caller is an AI. The correct posture — and the one MAJ's systems are built to — is reactive disclosure: the AI states the business name and call purpose at the outset, and discloses that it is an AI if the person directly asks. We do not claim a statutory requirement for a proactive AI announcement; if this matters to your deployment, verify the current regulatory text with your own legal adviser.

How does MAJ build TDRA compliance into the system?

MAJ Leads builds TDRA-compliant outbound systems — this is a design constraint, not an optional feature. The compliance layer is wired in before any call is placed:

• DNCR check automated in the Make.com workflow — every number is screened before the Vapi dial is triggered. A DNCR-positive number is flagged and suppressed automatically.
• 09:00–18:00 window enforced at the workflow level — the outbound trigger checks time-of-day before passing the dial instruction. Calls queued outside the window are held until the window opens, not dropped.
• Call recording with notification — every outbound call handled through our stack records the conversation and the AI states at the outset that the call is being recorded.
• Caller ID registered to the client's trade licence — we provision the originating number against the client's commercial registration as part of onboarding.
• Attempt-cap logic built in — the Make.com scenario tracks per-number dial counts within rolling 7-day windows and enforces the 2-attempt ceiling without manual oversight.
• Instant lockout on refusal — if the AI detects a hard refusal (or the call disposition is logged as refused), the number is immediately suppressed from further dials that day.

MAJ does not hold a TDRA operator licence — we are a builder of compliant systems, not a licensed telemarketing operator. Clients are responsible for obtaining their own prior TDRA approval for outbound campaigns; we advise on what that approval process involves and configure the technical layer to match it. For the full technical and legal walkthrough, see the comprehensive TDRA compliance guide.

What are the TDRA penalties for non-compliant outbound calling?

Cabinet Resolution 57 of 2024 sets an escalating fine structure. The figures below are drawn from Resolution 57 — verify the current text at the official source and take legal advice before relying on specific amounts.

Inbound versus outbound — which rules apply to your use case?

Most UAE businesses running AI receptionists and immediate-callback systems are operating in the first row — responding to customers who raised their hand. Businesses running proactive outbound campaigns fall into the second row and need the full compliance stack in place before going live.