UAE Ecommerce Compliance Checklist: Trade License, VAT, and Data Privacy

UAE ecommerce compliance is not one requirement. It is five.

Most sellers get their trade license sorted and assume that is enough. It rarely is. VAT registration, consumer protection rules, data privacy obligations, and platform-specific requirements each carry their own deadlines and penalties — and they are separate from your license.

This checklist covers every compliance area for UAE ecommerce sellers, with exact requirements, costs in AED, and the official portals you need to use.

Last verified: April 2026. Regulations change — confirm current requirements at the relevant authority portals.

Before You Check Compliance

Use this checklist to confirm you have the basics in place before reviewing each compliance area:

• You have a valid UAE trade license (mainland DED or free zone)
• Your trade license lists ecommerce or general trading as an approved activity
• You have a UAE business bank account open and operational
• You know your annual taxable revenue (or projected revenue)
• You have access to the FTA portal with a UAE Pass or registered account
• You know which platforms you sell on (own website, Noon, Amazon.ae, or all three)
• You have a privacy policy published on your website

If any of these are missing, resolve them first. Each compliance area below builds on a valid license and an operational business.

Trade License: What Type Do You Need?

Your trade license is the foundation of UAE ecommerce compliance. The UAE Ministry of Economy classifies ecommerce under specific activity codes that your license must include.

Mainland (DED) licenses are issued by the Dubai Department of Economy and Tourism (DET, formerly DED) via the Invest in Dubai portal. A General Trading license (activity code 52900) covers most product categories and costs AED 10,000-15,000 for the initial license, plus AED 5,000-12,000 annually for a virtual office tenancy contract (Ejari).

Free zone licenses are issued directly by the free zone authority. The most commonly used free zones for ecommerce are:

Compliance check for your license:

• License is active and not expired (check renewal date)
• Ecommerce or general trading is listed as an approved activity
• Your business address matches the address on your license
• If you have employees, their visa status is linked to your establishment card

Selling with an expired license exposes you to fines starting from AED 5,000 under the UAE Commercial Transactions Law. The DET can also suspend your ability to open or maintain seller accounts on UAE marketplaces.

If you are still deciding between mainland and free zone, the Dubai Company Registration guide covers the trade-offs in detail.

VAT: Registration, Invoicing, and Filing

The UAE introduced VAT on 1 January 2018 at a standard rate of 5%. The Federal Tax Authority (FTA) administers VAT registration and filing via tax.gov.ae.

Registration thresholds (AED, per 12-month period):

Compliance checklist for VAT:

• Calculate your taxable supplies for the previous 12 months and the next 30 days
• If you exceed or expect to exceed AED 375,000, register within 30 days or face a late registration penalty of AED 20,000
• After registration, charge 5% VAT on all standard-rated sales to UAE customers
• Issue a tax-compliant invoice for every B2B transaction (mandatory fields: your TRN, buyer’s name and address, VAT amount, supply date)
• File quarterly VAT returns (or monthly, if the FTA has placed you on monthly filing)
• Pay VAT due within 28 days of the tax period end date
• Maintain VAT records for a minimum of 5 years

Ecommerce-specific VAT rules:

Digital goods (software, e-books, subscription access) supplied to UAE consumers are VAT-applicable, even when delivery is entirely electronic. For cross-border physical goods, VAT applies at the point of import — if you dropship from overseas, confirm whether the VAT liability rests with you or your supplier.

Amazon.ae and Noon both provide VAT-compliant sales reports for your quarterly return. Neither platform files on your behalf.

See the UAE VAT guide for ecommerce sellers for registration steps, invoice templates, and penalty schedules.

Is your compliance stack complete? Use the SellerLegal compliance scorecard to see exactly where your UAE ecommerce business stands — and what to fix first. Take the free compliance check Takes 5 minutes. No sign-up required.

Consumer Protection: What Your Store Must Display

The UAE Consumer Protection Law (Federal Law No. 15 of 2020) and its executive regulations apply directly to ecommerce sellers. The law is enforced by the Ministry of Economy and the relevant emirate’s Department of Economic Development.

Required disclosures on your website or store listing:

• Business name, trade license number, and registered address visible on the site
• Clear product descriptions that match what is delivered (misdescription is a primary enforcement target)
• Displayed price must include VAT (if you are VAT-registered)
• Return and refund policy published and accessible before purchase
• Minimum warranty disclosure for electronics and goods that carry a legal warranty requirement
• Contact method for customer complaints (email, phone, or contact form)

Return and exchange rights:

Buyers are entitled to return defective goods for repair, replacement, or refund. For ecommerce, the practical standard is a 14-day return window — publish a clear return policy before purchase to reduce disputes and chargebacks.

Penalties for non-compliance:

Violations of the Consumer Protection Law carry fines from AED 1,000 to AED 250,000 depending on severity and the number of consumers affected (Ministry of Economy). Noon and Amazon.ae may also suspend seller accounts for compliance failures.

Data Privacy: UAE PDPL Obligations for Ecommerce

Federal Decree-Law No. 45 of 2021 (UAE Personal Data Protection Law, or PDPL) came into effect with executive regulations published in 2023. It applies to any entity that processes personal data of individuals in the UAE, including ecommerce websites collecting customer names, email addresses, shipping addresses, and payment details.

Core PDPL obligations for ecommerce sellers:

• Publish a privacy policy that explains what data you collect, why, how you store it, and who you share it with
• Obtain explicit consent before processing personal data for marketing purposes (transactional emails triggered by a purchase do not require separate consent)
• Honor data subject requests: customers can request access to their data, correction of inaccuracies, or deletion within a reasonable timeframe (the regulation specifies handling periods)
• If you use third-party analytics, advertising pixels, or CRM tools, disclose this in your privacy policy
• Cross-border data transfers to countries without adequate data protection require additional safeguards (standard contractual clauses or binding corporate rules)

Data Protection Officer (DPO) requirement:

A DPO is required for large-scale processing, special-category data (health, financial, biometric), or systematic monitoring. Most small-to-medium ecommerce sellers do not trigger the DPO requirement — but if you run an extensive loyalty or behavioral profiling program, review this with a data privacy advisor.

UAE Data Office: The regulatory body is the UAE Data Office at dataoffice.gov.ae. Enforcement has progressively increased since 2023.

Practical steps for your website:

• Add a cookie consent banner if your site uses tracking cookies (Google Analytics, Meta Pixel)
• Create a data deletion/unsubscribe process for your email marketing list
• Review your email service provider’s data processing agreement (DPA) to confirm it covers UAE data
• If you use Shopify, WooCommerce, or a similar platform, check its PDPL-compliance documentation

Corporate Tax: What Ecommerce Sellers Owe

The UAE introduced a federal corporate tax effective for financial years beginning on or after 1 June 2023. This is a significant change from the UAE’s previous zero-tax environment for most businesses.

Corporate tax rates:

Compliance checklist for corporate tax:

• Register for corporate tax with the FTA via tax.gov.ae (all UAE businesses are required to register, even if taxable income is below the threshold)
• Maintain financial records sufficient to prepare accurate accounts (invoices, receipts, bank statements)
• File an annual corporate tax return within 9 months of your financial year end
• Pay any tax due by the filing deadline

Free zone corporate tax:

Some free zone entities may qualify for a 0% rate on “qualifying income” under the Qualifying Free Zone Person (QFZP) regime. This applies to income from transactions with other free zone persons or certain permitted activities. Income from mainland UAE customers is taxed at the standard 9% rate. Confirm eligibility with a UAE corporate tax advisor before assuming any exemption applies.

Small business relief: Businesses with revenue of AED 3 million or below may elect for Small Business Relief (treated as no taxable income) for periods up to 31 December 2026. The election is available on the FTA portal.

Frequently Asked Questions

What are the legal requirements to sell online in the UAE?

To sell online in the UAE, you need a valid UAE trade license with ecommerce or general trading listed as an approved activity. You must register for VAT with the FTA once taxable revenue exceeds AED 375,000 per year, comply with the UAE Consumer Protection Law (Federal Law No. 15 of 2020) in your listings and return policies, and publish a privacy policy that meets UAE PDPL (Federal Decree-Law No. 45 of 2021) requirements.

Do I need to register for VAT if I sell online in the UAE?

Mandatory VAT registration is required when taxable supplies exceed AED 375,000 in any 12-month period. Voluntary registration is available from AED 187,500. Once registered, you must charge 5% VAT on UAE customer sales, issue compliant tax invoices for B2B transactions, and file quarterly VAT returns with the FTA. Late registration carries a penalty of AED 20,000.

Does the UAE PDPL apply to ecommerce websites?

Yes. Federal Decree-Law No. 45 of 2021 applies to any entity processing personal data of UAE residents, including ecommerce websites. You must publish a privacy policy, obtain consent before processing data for marketing, and honor customer requests to access, correct, or delete their data. The UAE Data Office at dataoffice.gov.ae is the enforcement authority.

Can I sell on Noon or Amazon.ae with a free zone license?

Yes. Both platforms accept free zone trade licenses for seller registration. You need a valid UAE trade license, a UAE bank account, and VAT registration if your annual sales exceed AED 375,000. Noon requires sellers to maintain platform performance standards; Amazon.ae requires VAT-compliant invoicing for business customers. Neither platform handles your tax filings.

What is the corporate tax rate for UAE ecommerce businesses?

The UAE corporate tax rate is 9% on taxable income above AED 375,000 per financial year, effective from financial years starting on or after 1 June 2023. Income below AED 375,000 is taxed at 0%. All UAE businesses must register for corporate tax with the FTA, even if income is below the threshold. Small businesses with revenue under AED 3 million may elect for simplified Small Business Relief through 31 December 2026.

Keep Reading

• Dubai Company Registration for Ecommerce — mainland vs free zone compared with full cost breakdown in AED
• Ecommerce License Dubai: Which License Do You Need? — activity codes, free zone options, and what your license must cover
• Trademark Registration in the UAE — protect your brand before someone else registers it