Corporate & Regulatory Updates
SCA Becomes Capital Markets Authority — Compliance Deadline January 1, 2027
What happened:
The Securities and Commodities Authority is now the Capital Markets Authority with expanded federal powers. All businesses must regularize their status within one year from entry into force by January 1, 2027.
Why it matters:
Foreign issuers including ADGM and DIFC companies offering securities in UAE now fall under federal oversight, even when operating from free zones. Penalties reach AED 4 million with permanent business bans possible.
What to do: Review if your business offers securities or targets UAE clients for regulated activities. Book compliance review before 2027 deadline.
---
Virtual Assets Now Federal Financial Products — Trading Licenses Required
What happened:
The Capital Markets Law brings virtual assets like cryptocurrencies within federal capital markets regulation as "Financial Products". Trading virtual assets in UAE is prohibited unless the asset is accepted on CMA-licensed platforms and registered.
Why it matters:
All crypto businesses need VASP licensing across CMA, VARA, CBUAE, ADGM or DIFC with local presence and strict AML controls required. Only CBUAE-licensed dirham-backed stablecoins permitted for property transactions.
What to do: Check if your business handles crypto payments, custody or trading. Get licensing assessment before offering any virtual asset services.
---
DIFC Data Protection Law Expanded — Affects Companies Outside DIFC
What happened:
DIFC introduced amendments expanding territorial reach to entities outside DIFC that target or process DIFC personal data.
Why it matters:
Data protection transforms from back-office issue into core governance risk with real regulatory and civil liability exposure. Companies operating onshore, in DIFC and ADGM must integrate PDPL, DIFC and ADGM requirements within unified compliance model.
What to do: Map all data flows involving DIFC residents or entities. Update privacy policies and data processing agreements to meet expanded territorial scope.
Case of the Week
DIFC Court Rules Against SadaPay in Contract vs Employment Dispute
What happened:
Tayseer Ali, former CFO of SadaPay Technologies, quit in July 2024 and sued for correct valuation of his stock options under a Grant Agreement. SadaPay tried to block the case, arguing their employment contract said disputes must go to Pakistan courts, but the DIFC Court ruled it had jurisdiction because the stock options were governed by a separate Grant Agreement that specifically gave DIFC Courts exclusive jurisdiction.
Why it matters:
When you have multiple contracts with different jurisdiction clauses, courts will look at which agreement is closest to the "centre of gravity" of the dispute. The employment contract pointed to Pakistan, but the Grant Agreement's DIFC clause controlled because that's what the fight was actually about.
What to do: Check all your contracts for conflicting jurisdiction clauses - employment agreements, share schemes, and bonus plans might send disputes to different courts, creating expensive legal battles over where cases can be heard.
International Developments
FATF Grey List Updates Hit Kuwait and PNG
What happened:
FATF added Kuwait and Papua New Guinea to its "grey list" in October 2024, joining 24 countries under increased monitoring for anti-money laundering deficiencies.
Why it matters:
Being grey-listed triggers enhanced due diligence obligations for UAE banks dealing with these jurisdictions - transactions get delayed, costs increase.
What to do: Review any existing business relationships with Kuwaiti or PNG companies and prepare for stricter compliance requirements.
---
BVI Beneficial Ownership Regime Now Active
What happened:
BVI's new beneficial ownership rules took effect January 2024, with public access to ownership data starting April 2024 for "legitimate interest" requests.
Why it matters:
Non-compliant BVI entities face operational restrictions affecting transactions and corporate actions - even without penalties until March 2024.
What to do:
If you own BVI companies, complete beneficial ownership filings immediately to avoid disruption to business operations.
Fun Legal Fact
In 1897, the Indiana State Legislature nearly passed a bill that would have legally redefined the mathematical constant pi as exactly 3.2. A Purdue University mathematics professor happened to be at the statehouse and quietly convinced lawmakers that geometry doesn't bend to legislative will. The bill was tabled indefinitely after legislators realized they couldn't actually change the laws of mathematics. Apparently even politicians have their limits when it comes to creative accounting.