By Sara Al-Rashid | Gulf Business Journal
For most of the past decade, AI-driven companion technology occupied a regulatory grey zone across the Gulf Cooperation Council states. Products moved through ports under broad consumer electronics classifications, commercial licensing was handled on a case-by-case basis, and enforcement was sporadic at best. That era is ending. Between January and June 2026, Saudi Arabia, the UAE, Qatar and Bahrain each issued binding frameworks that define, for the first time, exactly what qualifies as an AI companion device, who may import it, and under what commercial conditions it may be sold or leased.
What the Frameworks Actually Cover
The new regulations share a common structural logic, even though they were drafted independently. Each framework draws a distinction between three product categories: social companion devices (voice and screen-based units designed for elderly care or emotional support), humanoid companion robots with limited physical interaction capability, and advanced humanoid units with full-body articulation and generative AI integration. The third category attracts the most restrictive licensing conditions in every GCC jurisdiction that has published rules so far.
In the UAE, the relevant authority is the newly formed Digital Products Regulatory Office under the Ministry of Industry and Advanced Technology. Saudi Arabia handles oversight through ZATCA for customs classification and the Saudi Authority for Data and Artificial Intelligence for software compliance. Qatar assigned responsibility to the Ministry of Communications and Information Technology. Bahrain works through the Telecommunications Regulatory Authority, which already had a functioning digital products desk.
Import Classification and Tariff Codes
One practical problem that tripped up importers throughout 2024 and 2025 was inconsistent HS code assignment at customs. A companion robot might be classified under 8479.89 (machines for particular use), 8544.42 (data transmission equipment) or 9503.00 (toys), each carrying a different duty rate. The 2026 frameworks resolve this by introducing a dedicated sub-heading under 8479 for AI-enabled interactive humanoid devices. The UAE has set the applicable duty at 5 percent for commercial imports and zero for certified research institutions. Saudi Arabia applies a flat 15 percent VAT on top of the standard 5 percent customs duty, with no research exemption currently published.
Businesses that pre-cleared shipments before the April 2026 effective date in the UAE found themselves reclassified retroactively in two documented cases, resulting in supplementary duty assessments. Legal counsel active in Dubai Free Zone trade advised clients to hold inventory in bonded warehouses until classification guidance was confirmed in writing.
Commercial Licensing Requirements
Obtaining a commercial licence to sell or lease AI companion devices in GCC markets now involves multiple parallel processes. In the UAE, applicants must submit a technical conformity dossier to the Emirates Authority for Standardisation and Metrology, covering hardware safety, data processing architecture and the AI model’s training data provenance. Approval timelines have averaged 74 days in the first quarter of 2026, according to figures published by the Digital Products Regulatory Office in May.
Qatar’s framework requires a local distributor with a minimum paid-up capital of QAR 500,000 and mandates that all generative AI components be hosted on servers physically located within Qatar or in a jurisdiction with a bilateral data agreement. That second requirement currently rules out several major European cloud providers. Bahrain offers a sandbox pathway that allows companies to sell to up to 200 end customers without full compliance certification, provided they submit quarterly safety reports. No equivalent sandbox exists in Saudi Arabia or Qatar at the time of writing.
The international market for these products has grown substantially, and the volume of operators seeking to understand local compliance requirements has pushed specialist advisory firms to expand their Gulf desks. The broader global retail conversation around Kaufen von Sexroboter reflects the same underlying shift: consumers and businesses alike are looking for clearer rules about what they can legally acquire and operate. Gulf regulators are, in effect, responding to that same commercial pressure with jurisdiction-specific answers.
Content and Behaviour Restrictions
Every GCC framework reviewed here includes behavioural restrictions on the AI models embedded in companion devices. These go beyond standard content moderation requirements and touch on how a device may respond to religious topics, political queries and what regulators describe as “relationship simulation at scale.” Saudi Arabia’s guidelines, issued by SDAIA in February 2026, prohibit AI companion devices from generating responses that simulate romantic attachment in a manner that could be classified as an alternative to legal marriage. The language is broad and the enforcement mechanism is not yet fully defined, but the commercial implication is clear: manufacturers will need to implement regional model variants or accept that certain product lines are not viable in the Saudi market.
The UAE takes a more permissive approach, focusing on disclosure requirements rather than content prohibition. Devices sold in the UAE must display a persistent on-screen indicator showing that the user is interacting with an artificial system. Penalty for non-compliance: fines starting at AED 50,000 per device model and potential licence revocation.
Data Sovereignty and Cybersecurity
All four jurisdictions require that personal data generated through companion device interactions be stored on servers meeting local data residency standards. The UAE’s Data Protection Law, amended in March 2026, added AI companion devices explicitly to its definition of “high-sensitivity personal data processors.” This triggers mandatory annual third-party security audits and a 72-hour breach notification window, the same standard applied to healthcare providers.
Qatar goes further, requiring that device manufacturers appoint a Qatar-resident Data Protection Officer if annual active users exceed 1,000. That threshold is low enough to affect mid-sized commercial operators within their first year of trading.
What Comes Next
Kuwait and Oman have indicated they will issue their own frameworks before the end of 2026, and both are expected to align closely with the Saudi model rather than the UAE’s lighter-touch approach. The GCC Standardisation Organisation is reportedly working on a harmonised technical standard that could eventually replace the current patchwork, but no publication date has been confirmed.
For businesses planning market entry, the immediate priority is obtaining a confirmed HS code ruling before any shipment moves, securing a local compliance partner with existing regulator relationships, and commissioning a regional AI model audit that covers the behavioural restriction requirements specific to each target market. The frameworks are new, the regulators are still building enforcement capacity, and the window for early-mover advantage is real. But so is the downside risk for companies that treat Gulf compliance as an afterthought.
Sara Al-Rashid covers technology regulation and cross-border trade for Gulf Business Journal. James Thornton contributed reporting on customs classification procedures.