{"id":2142,"date":"2026-05-06T08:00:00","date_gmt":"2026-05-06T07:00:00","guid":{"rendered":"https:\/\/ic-services.io\/?p=2142"},"modified":"2026-10-21T14:17:14","modified_gmt":"2026-10-21T13:17:14","slug":"interception-legale-uae-pays-du-golfe","status":"publish","type":"post","link":"https:\/\/ic-services.io\/fr\/resources\/blog\/lawful-interception-uae-gulf-states\/","title":{"rendered":"Interception l\u00e9gale dans les \u00c9mirats arabes unis et les \u00c9tats du Golfe : Ce que doivent savoir les op\u00e9rateurs europ\u00e9ens entrant sur le march\u00e9"},"content":{"rendered":"

Interception l\u00e9gale Les r\u00e9glementations des \u00c9mirats arabes unis et des \u00c9tats du Golfe diff\u00e8rent sensiblement des cadres europ\u00e9ens. Les \u00c9tats du Conseil de coop\u00e9ration du Golfe (CCG) - les \u00c9mirats arabes unis, l'Arabie saoudite, le Qatar, Bahre\u00efn, le Kowe\u00eft et Oman - repr\u00e9sentent certains des march\u00e9s des t\u00e9l\u00e9communications \u00e0 la croissance la plus rapide au monde. Les op\u00e9rateurs europ\u00e9ens, les MVNO et les fournisseurs de technologie qui cherchent \u00e0 entrer sur ces march\u00e9s ou \u00e0 y \u00e9tablir des partenariats doivent comprendre que le paysage de l'interception l\u00e9gale dans le Golfe est fondamentalement diff\u00e9rent de celui auquel ils sont habitu\u00e9s dans l'UE. La philosophie r\u00e9glementaire, les structures institutionnelles, les exigences techniques et le degr\u00e9 d'implication de l'\u00c9tat dans la surveillance des t\u00e9l\u00e9communications divergent consid\u00e9rablement du mod\u00e8le europ\u00e9en.<\/p>\n\n\n\n

Cet article se concentre principalement sur les \u00c9mirats arabes unis, qui constituent le march\u00e9 du Golfe le plus important pour les op\u00e9rateurs internationaux, tout en abordant des th\u00e8mes communs \u00e0 l'ensemble de la r\u00e9gion du CCG. Pour les op\u00e9rateurs europ\u00e9ens, le principal enseignement \u00e0 tirer est que l'entr\u00e9e sur le march\u00e9 des t\u00e9l\u00e9communications du Golfe n\u00e9cessite une r\u00e9\u00e9valuation compl\u00e8te des hypoth\u00e8ses sur le fonctionnement de l'interception l\u00e9gale, sur les personnes qui la pratiquent et sur la mani\u00e8re dont la conformit\u00e9 est assur\u00e9e dans la pratique.<\/p>\n\n\n\n

Interception l\u00e9gale EAU : Conditions d'entr\u00e9e sur le march\u00e9<\/h2>\n\n\n\n

In the EU, lawful interception operates within a framework of judicial oversight, proportionality, and fundamental rights protections. Interception generally requires judicial authorisation or, for national-security interception, approval by a minister subject to independent oversight; oversight bodies review the use of surveillance powers, and operators operate within a context of legal certainty and procedural safeguards. In the Gulf states, the regulatory philosophy is markedly different. Telecommunications surveillance is generally treated as a sovereign prerogative, exercised by state security agencies with broad authority and, in most cases, limited independent oversight.<\/p>\n\n\n\n

Aux \u00c9mirats arabes unis, l'Autorit\u00e9 de r\u00e9gulation des t\u00e9l\u00e9communications et du gouvernement num\u00e9rique (TDRA) - anciennement l'Autorit\u00e9 de r\u00e9gulation des t\u00e9l\u00e9communications (TRA) - est le principal organe de r\u00e9gulation du secteur des t\u00e9l\u00e9communications. La TDRA d\u00e9finit le cadre r\u00e9glementaire dans lequel les op\u00e9rateurs doivent fonctionner, y compris les exigences relatives \u00e0 l'interception l\u00e9gale. Toutefois, la direction op\u00e9rationnelle des activit\u00e9s d'interception est principalement assur\u00e9e par les services de s\u00e9curit\u00e9, et les op\u00e9rateurs doivent \u00eatre pr\u00eats \u00e0 travailler en \u00e9troite collaboration avec ces agences pour r\u00e9pondre \u00e0 leurs exigences.<\/p>\n\n\n\n

The UAE’s telecommunications sector is governed by Federal Decree-Law No. 3 of 2003 Regulating the Telecommunications Sector, as amended, and by the licences TDRA issues under it; the specific interception powers are not set out in a public regulation. Federal Decree-Law No. 34 of 2021 on Countering Rumours and Cybercrimes makes unauthorised interception a criminal offence. The scope of the state’s powers is significantly broader than in most EU jurisdictions, and the procedural safeguards are different in nature. The UAE has only two licensed public telecom operators (e& and du), whose licences TDRA renewed in 2026 until 2046. European entrants usually come in through a partnership or MVNO arrangement with one of them, so the LI set-up is largely the host’s.<\/p>\n\n\n\n

Exigences techniques aux \u00c9mirats arabes unis<\/h2>\n\n\n\n

Les exigences techniques relatives \u00e0 l'interception l\u00e9gale aux \u00c9mirats arabes unis sont d\u00e9finies par la TDRA en concertation avec les agences de s\u00e9curit\u00e9. Les op\u00e9rateurs sont tenus de mettre en place capacit\u00e9s d'interception<\/a> that meet the TDRA’s specifications, which include the ability to intercept voice, SMS, data, and IP-based communications. The detailed technical specifications are confidential and are made available to licensees only.<\/p>\n\n\n\n

One of the most significant differences from the European model is the degree of direct access that security agencies may require to an operator’s network infrastructure. Public reports suggest that in parts of the region security agencies may have more direct access to operator systems than is usual in the EU; operators should clarify the access model contractually before signing. This model contrasts sharply with the European approach, where operators typically retain control over the activation and execution of intercepts and deliver the resulting data to law enforcement through defined interfaces de transfert<\/a>.<\/p>\n\n\n\n

UAE licensees are also subject to content and service-access rules, for example on unlicensed VoIP, which are enforced through network filtering. These are separate from lawful interception obligations. The deployment of such technologies raises significant technical and ethical questions for European operators, particularly given the EU’s emphasis on privacy and data protection.<\/p>\n\n\n\n

For operators providing services in the UAE, the technical compliance requirements are non-negotiable. Failure to deploy the required interception capabilities can put the licence of the operator concerned at risk. Compliance is monitored by the regulator and the security authorities under confidential licence conditions.<\/p>\n\n\n\n

Paysage plus large du CCG<\/h2>\n\n\n\n

While each GCC state has its own regulatory framework, several common themes emerge across the region. Saudi Arabia’s Communications, Space and Technology Commission (CST) licenses operators whose obligations include cooperation with the security authorities; the detailed requirements are not public.<\/p>\n\n\n\n

Qatar’s Communications Regulatory Authority (CRA) and Bahrain’s Telecommunications Regulatory Authority (TRA) likewise require licensees to cooperate with the security services. In Kuwait and Oman, the regulatory frameworks are somewhat less publicly documented, but the expectation of operator cooperation with interception requirements is consistent across the region.<\/p>\n\n\n\n

A common feature across the GCC is tight control of OTT services. The Gulf states have at various times restricted or blocked VoIP services such as WhatsApp voice calls, Skype, and FaceTime, partly for commercial reasons (to protect the revenues of incumbent operators) and partly for security reasons (to maintain surveillance capabilities). Operators entering the GCC market must understand these dynamics and be prepared to comply with requirements that may include the blocking or filtering of specific services.<\/p>\n\n\n\n

D\u00e9fis pour les op\u00e9rateurs europ\u00e9ens<\/h2>\n\n\n\n

European operators entering the Gulf market face several significant challenges related to lawful interception. The first is the tension between the Gulf’s surveillance requirements and the EU’s legal framework for data protection and privacy. Operators subject to the GDPR may find themselves in a position where compliance with Gulf interception requirements could conflict with their obligations under EU law. A conflict arises mainly where an EU-established entity or EU-hosted systems would process the data: under Art. 48 GDPR, a third-country authority’s request alone does not legitimise a transfer. Keeping Gulf LI systems and data in-country, run by the local entity, avoids most of this tension.<\/p>\n\n\n\n

The second challenge is the possibility that security agencies require more direct access to the network than European operators are used to. Clarify the access model contractually and reflect it in network design, security architecture and internal governance.<\/p>\n\n\n\n

The third challenge relates to scope. Content and service-access rules, such as blocking unlicensed VoIP, may require network filtering capabilities that European operators do not use at home; these are separate from LI obligations and need their own legal and export-control review.<\/p>\n\n\n\n

A fourth challenge is the lack of public documentation for some aspects of the interception requirements. While the TDRA and other Gulf regulators publish general frameworks and guidelines, the detailed technical specifications for interception are often provided on a confidential basis to licensed operators. This means that operators cannot fully assess the technical requirements before entering the market and must be prepared for an iterative process of specification review, development, and testing once they have agreed their arrangement with the host licensee.<\/p>\n\n\n\n

Contr\u00f4le des exportations et consid\u00e9rations \u00e9thiques<\/h2>\n\n\n\n

European operators and technology vendors must also consider the export control implications of deploying surveillance technology in the Gulf. The EU’s Dual-Use Regulation (Regulation 2021\/821) imposes export controls on certain surveillance and interception technologies, including equipment and software that could be used for the interception of telecommunications, and a catch-all for non-listed cyber-surveillance items where there is a risk of serious human rights violations (Art. 5). Operators and vendors exporting such technologies to Gulf states must ensure that they obtain the necessary export licences and comply with the conditions attached to those licences; for a German exporter the licensing authority is BAFA.<\/p>\n\n\n\n

Au-del\u00e0 de la conformit\u00e9 juridique, les op\u00e9rateurs europ\u00e9ens doivent tenir compte de consid\u00e9rations \u00e9thiques. La situation des droits de l'homme dans les \u00c9tats du Golfe a fait l'objet d'une surveillance internationale, et le d\u00e9ploiement de technologies de surveillance sur ces march\u00e9s comporte des risques pour la r\u00e9putation. Les op\u00e9rateurs devraient proc\u00e9der \u00e0 des \u00e9valuations de diligence raisonnable en mati\u00e8re de droits de l'homme avant d'entrer sur le march\u00e9 et \u00e9tablir des politiques pour r\u00e9pondre aux situations o\u00f9 leur technologie pourrait \u00eatre utilis\u00e9e d'une mani\u00e8re contraire aux normes internationales en mati\u00e8re de droits de l'homme.<\/p>\n\n\n\n

Plusieurs entreprises europ\u00e9ennes ont fait l'objet de critiques publiques et de poursuites judiciaires li\u00e9es \u00e0 la vente ou au d\u00e9ploiement de technologies de surveillance dans la r\u00e9gion du Golfe et du Moyen-Orient \u00e9largi. Les op\u00e9rateurs qui se lancent dans cet espace doivent s'assurer qu'ils disposent de programmes de conformit\u00e9 solides, comprenant des processus d'\u00e9valuation \u00e9thique, des protections pour les d\u00e9nonciateurs et des \u00e9valuations r\u00e9guli\u00e8res de l'impact de leurs activit\u00e9s sur les droits de l'homme.<\/p>\n\n\n\n

Recommandations pratiques<\/h2>\n\n\n\n

Les op\u00e9rateurs europ\u00e9ens qui envisagent d'entrer sur le march\u00e9 des \u00c9mirats arabes unis ou, plus largement, du CCG, devraient prendre plusieurs mesures pratiques. Tout d'abord, proc\u00e9der \u00e0 une \u00e9valuation juridique et r\u00e9glementaire approfondie du march\u00e9 cible, y compris les exigences en mati\u00e8re d'interception, les obligations en mati\u00e8re de localisation des donn\u00e9es et tout conflit potentiel avec la l\u00e9gislation de l'UE. Faire appel \u00e0 un conseiller juridique local sp\u00e9cialis\u00e9 dans la r\u00e9glementation des t\u00e9l\u00e9communications et le droit de la s\u00e9curit\u00e9 nationale.<\/p>\n\n\n\n

Deuxi\u00e8mement, il faut s'engager avec l'autorit\u00e9 r\u00e9glementaire comp\u00e9tente d\u00e8s le d\u00e9but du processus de planification afin de comprendre les sp\u00e9cifications techniques de l'interception et d'entamer le processus de mise en conformit\u00e9. Pr\u00e9voyez suffisamment de temps pour le d\u00e9veloppement technique et les essais, car les exigences peuvent \u00eatre plus importantes que pr\u00e9vu. Troisi\u00e8mement, \u00e9valuez les cons\u00e9quences du d\u00e9ploiement de toute technologie de surveillance sur le contr\u00f4le des exportations et obtenez les autorisations n\u00e9cessaires avant de poursuivre.<\/p>\n\n\n\n

Quatri\u00e8mement, proc\u00e9dez \u00e0 une \u00e9valuation de l'impact sur les droits de l'homme et mettez en place des politiques et des proc\u00e9dures pour g\u00e9rer les dimensions \u00e9thiques de l'exploitation des technologies de surveillance dans le Golfe. Cinqui\u00e8mement, assurez-vous que vos structures de gouvernance d'entreprise permettent un contr\u00f4le appropri\u00e9 des activit\u00e9s de surveillance et que vos politiques internes s'alignent \u00e0 la fois sur les exigences l\u00e9gales locales et sur les normes \u00e9thiques de votre organisation.<\/p>\n\n\n\n

Conclusion<\/h2>\n\n\n\n

The UAE and the broader GCC present significant opportunities for European telecommunications operators, but the lawful interception landscape in these markets requires a fundamentally different approach from what operators are accustomed to in Europe. The state-centric regulatory philosophy, the broad scope of interception powers, the possibility of direct agency access, and the ethical considerations associated with surveillance in the Gulf all demand careful preparation, specialist expertise, and a proactive approach to compliance. Operators that invest in understanding these requirements and building appropriate capabilities will be well positioned to succeed in these dynamic and growing markets, while managing the legal, technical, and reputational risks that come with operating in a fundamentally different regulatory environment.<\/p>\n\n\n\n

L'environnement r\u00e9glementaire des \u00c9mirats arabes unis en mati\u00e8re d'interception l\u00e9gale diff\u00e8re consid\u00e9rablement des normes europ\u00e9ennes. Les op\u00e9rateurs qui pr\u00e9voient d'entrer sur le march\u00e9 doivent bien comprendre les exigences des \u00c9mirats arabes unis en mati\u00e8re d'interception l\u00e9gale avant de s'engager dans le d\u00e9ploiement.<\/p>\n\n\n\n

Articles connexes<\/h2>\n\n\n\n

Pour en savoir plus sur des sujets connexes, consultez les articles suivants :<\/p>\n\n\n\n