People who illegally use personal data in the UAE could face imprisonment and financial penalties of up to Dh500,000 ($136,000), Public Prosecution said on Saturday. Penalties for illegally collecting and processing personal data and information belonging to Emiratis or residents ranged from Dh50,000 to Dh500,000, under Article 13 of the Federal Decree Law No 34 of 2021 on Combatting Rumours and Cybercrimes. The extent of the fines and penalties was issued on Saturday and followed the largest legal reform in the UAE's 50-year history in November, which included more than 40 laws, some of which were updated versions of legislation. Major changes included greater protection of personal data and stronger copyright rules. Legislation covering the spreading of rumours and fake news, electronic fraud and protecting personal data was put in place. The changes are the result of efforts by 540 experts from 50 federal and local authorities who worked with more than 100 private sector organisations during a period of five months, officials said.