No Driver, No Problem

Understanding how the law comes together to establish liability, protect privacy, enforce accountability as autonomous vehicles go-live in Dubai

If you have driven along Jumeirah the last two weeks, the sights and sounds have been mostly the same as they always are. The low hum of construction, the distant sound of the sea, unhurried, beneath the beach traffic, a few incredible coffee shops.

But this week, something was different. Moving quietly through that familiar backdrop were autonomous cars with no one in the front seat. No driver. Just the road, the AI, and whoever happened to be in the back.

It has been one week since Dubai launched commercial autonomous taxi operations. WeRide's AI powering Tawasul Transport's fleet, bookable through Uber. Baidu's technology driving Dubai Taxi Company's vehicles, available on Apollo Go. One hundred cars. Live. On public roads. And if you have ever wondered what it actually means - legally, practically, for you as a passenger - the answer is more considered than you might expect.

// Who Dunnit to What Failed

The first question is the obvious one: if something goes wrong, who is responsible?

I will resist the lawyerly instinct to say "it depends" - though it does - and give you the cleaner version.

Dubai Law No. 9 of 2023, the Emirate's foundational autonomous vehicle legislation, places primary civil liability on the licensed Operator. This is the entity that holds the RTA permit: Tawasul Transport, Dubai Taxi Company. Not the entity that runs the model or the platform that enables the booking.

This is a genuinely thoughtful design. As a victim, you do not need to identify a software fault, locate an AI company headquartered elsewhere in the world, or argue with a platform about terms of service. There is a local, licensed, accountable entity standing in front of the risk.

The law then allows that entity to pursue recourse - against whichever entity was responsible for the failure.

The law also preserves criminal liability. This matters more than it sounds. The law does not grant autonomous systems a kind of legal impunity by virtue of being machines. Crime is a crime, regardless of who, or what, committed it. And Decision No. 939 of 2025 backs that up with teeth: mandatory incident notification to the RTA, tamper-proof preservation of all operational data, and immediate deactivation of the autonomous system the moment a safety threat is detected.

This points to the deeper structural shift underway. We are moving from a "who did it" system to a "what failed" system. With a human driver, liability is fault-based — was the driver speeding, distracted, negligent? Centuries of law know how to answer that. With an autonomous vehicle, there is no driver to be negligent. The question becomes: was it an algorithmic decision? A GPS error? A cloud failure? The law of torts is being quietly rewritten in real time, and Dubai's framework is among the first in the region to genuinely grapple with it.

The accident investigation is no longer a traffic police report — it is a forensic audit of AI decision-making, sensor logs, and software version history.

// Hands Off

Article 13 of Dubai Law No. 9 sets out what is expected of you: comply with the operator's safety requirements, do not tamper with the vehicle's systems, and do not bring anything into the vehicle that could compromise its operation. Think of it like boarding a flight. You receive a safety brief. You cannot interfere with the aircraft's systems. You follow crew instructions. The obligations are light; the protections are substantial.

// Rest-Insured

The RTA has confirmed that comprehensive insurance is live and covering every passenger today. But it is worth understanding what "comprehensive" has to mean in this context.

Standard motor insurance was designed for a world where the human driver is the primary risk variable - age, history, vehicle value. Autonomous vehicles invert that entirely. The risk is no longer human error; it is system failure. What AVs actually require are policies sophisticated enough to cover three distinct categories simultaneously: physical risk, cyber risk, and product or software failure risk. That is a fundamentally different underwriting product, and globally, the industry is moving to catch up.

// You're paying for the product, so you're not the product

These vehicles are, in the most literal sense, computers on wheels. LiDAR, camera arrays, GPS, radar - all running simultaneously, every second of your journey generating data about your pickup location, your route, the time of day, how long you were inside. Combined with your identity from the Uber or Apollo Go app, this is a record of your movements that is far more granular than anything a traditional taxi could produce.

Some configurations also use cabin-facing cameras - to verify the vehicle is empty before the next booking, or to check that a child has not been left behind. Your image may be captured in what feels like a private space.

Dubai's framework provides meaningful protection. Article 11(12) of Dubai Law No. 9 prohibits operators from using operational data for any purpose other than operating the vehicle without RTA approval. The personal data protection law adds further obligations. These are real constraints - though how they interact with global AI development pipelines, and how they will be enforced at scale, remains an evolving question worth watching.

// Next

Dubai deserves real credit for the speed and seriousness of what it has assembled. From primary legislation to administrative decision to licensing framework to live commercial deployment - that is a remarkable sequence of regulatory delivery, and not one many cities in the world could match.

There will naturally be gaps, and they will be closed as the fleet scales from one hundred vehicles to thousands. Precise liability allocation below the operator level. Mandatory minimum passenger compensation thresholds. AV-specific data governance that anticipates AI training use cases. And perhaps most critically: a unified federal standard so that a vehicle licensed to operate in Dubai has a clear pathway to operate in Abu Dhabi.

There is also a larger story here. Dubai is arguably the safest, smartest city in the world. Framing autonomous taxis as a safety upgrade rather than a risk experiment is coherent - and compelling - particularly as the world is watching this region with fresh attention.

The vehicles moving quietly through Jumeirah this week are not just a mobility announcement. They are a statement about what kind of city Dubai intends to be.