I read it a bit differently. The law states (my emphasis added):
Whoever uses a fraudulent computer network protocol address (IP address) by using a false address or a third-party address by any other means for the purpose of committing a crime or preventing its discovery, shall be punished by temporary imprisonment and a fine of no less than Dh500,000 and not exceeding Dh2,000,000, or either of these two penalties.
Admittedly that's a vague definition, but I don't think just using a VPN (i.e. for your company network) is a violation? To me, the wording means it's ok to use as long as you're not "committing a crime or preventing its discovery"... However, I fear this law is ripe to be "selectively applied".
http://www.emirates247.com/news/emir...07-22-1.636441