Photo: AwOiSoAk KaOsIoWa, Jumeirah Lakes Towers, CC BY-SA 3.0 via Wikimedia Commons.
Most free zone companies treat beneficial ownership as a form they filled in once, somewhere between the licence application and the bank account. The law does not see it that way. Cabinet Decision No. (109) of 2023 imposes a continuing duty to keep three separate registers current, and its companion penalty decree fines you for the paperwork failure itself, whether or not anyone has misled the authorities.
By The Freezone RA Editorial Team | August 2026
This guide sets out what UAE free zone UBO compliance actually requires in 2026: who counts as a beneficial owner, which registers you must hold, how fast you must update them, and what each failure costs under the published penalty schedule. The short version is that the expensive breaches are administrative, and the deadline that catches people is fifteen days long.
UAE free zone UBO compliance applies to almost every commercial entity
The framework is Cabinet Decision No. (109) of 2023 on Regulating the Beneficial Owner Procedures, effective 16 November 2023, which abrogated the earlier Cabinet Decision No. (58) of 2020. Article 3 applies it to the Registrar and to every legal person licensed or registered in the country, expressly including the commercial free zones. If you hold a licence from DMCC, JAFZA, RAKEZ, IFZA, Meydan or any comparable zone, you are inside it.
The exemptions are narrow: companies wholly owned by the Federal or Local Government, companies wholly owned by those companies, and a Governmental Partner. The exemption that matters most to investors is for Financial Free Zones. An entity in the DIFC or in ADGM is not covered by Cabinet Decision 109 at all; each of those zones runs its own beneficial ownership regime under its own regulator, with its own filing route.
For everyone else, the “Registrar” named throughout the decision is the authority supervising the trade names register for your entity, which in practice means your own free zone authority rather than the Ministry of Economy and Tourism directly. Each zone collects the declaration through its own portal, usually at incorporation and again as part of licence renewal — which is where the misunderstanding starts, because the statutory deadlines run on their own clock and take no notice of when your licence expires.
Article 5 sets the threshold at 25 percent, then keeps going
A beneficial owner is the natural person who ultimately owns or controls the company through direct or indirect ownership of 25 percent or more of its capital, or who holds 25 percent or more of the voting rights. That includes ownership held through a chain of companies: if an offshore holding company owns your free zone entity, you look through it until you reach the people at the top of the chain.
Ownership is not the only test. Control by other means counts too, and the decision gives the right to appoint or dismiss the majority of the directors as its worked example. Where more than one person participates in owning or controlling a percentage, all of them are treated as owners and controllers of it. The Registrar is also directed to apply a risk-based approach, with Complex Ownership Structures singled out, so a layered structure invites more scrutiny rather than less.
If no natural person meets the test after all possible means have been exhausted, or there is genuine doubt, the decision falls back in stages: first to whoever exercises control by other means, and failing that to the senior management official, who is deemed the beneficial owner. One carve-out is worth knowing. Under Article 6(2), an entity owned by a company listed on a regulated market with adequate transparency requirements, or a majority-owned subsidiary of such a company, is exempt from the Article 6(1) duty to obtain and maintain that data.
You must keep three sets of records, not one online declaration
Filing a form on your free zone portal does not discharge the obligation. The decision requires records you create and hold yourself, available to the Registrar on request. The Beneficial Owner’s Register under Article 8 must be created within 60 days of the entity coming into existence, and for each beneficial owner it must carry the full name, nationality, date and place of birth; the address for notifications; the travel document or identity card number with its country and dates of issuance and expiry; and the basis and date on which the person became, and later ceased to be, a beneficial owner.
The Register of Partners or Shareholders under Article 10 is more than a shareholder list. It records the number of shares held, their categories and associated voting rights, and the date each person acquired that capacity. For individuals it also needs nationality, address, place of birth, the name and address of the employer, and a true copy of a valid identity document; corporate shareholders require the Article 4(1) essential data. Trustees and nominee board members who hold shares go in this register too, with the data of the people they represent.
The third strand is nominee disclosure under Article 9. A manager or board member acting as a nominee must tell the company within 15 days of taking on that capacity and supply the Article 10 data, report any change to it within 15 days, and report ceasing to be a nominee within 15 days. Both registers then go to the Registrar under Article 11 within 60 days of the entity’s licensing and registration, and you must take reasonable measures to protect them from damage, loss or destruction.
| Record | Core content | Statutory clock |
|---|---|---|
| Beneficial Owner’s Register (Art. 8) | Name, nationality, date and place of birth, address, ID with issue and expiry, basis and date of becoming a UBO | Create within 60 days; update within 15 days |
| Register of Partners or Shareholders (Art. 10) | Shares and categories, voting rights, date acquired, ID copies, corporate shareholder data, trustee and nominee details | Update within 15 days of awareness |
| Nominee board member disclosure (Art. 9) | The nominee’s Article 10 data and the identity of the person they act for | Notify the company within 15 days |
| Submission to the Registrar (Art. 11) | Both registers, plus a UAE-resident authorised contact with address and ID copy | Within 60 days of licensing; further data within 14 days |
The fifteen-day update clock is where free zone companies break
Articles 8 and 10 both give you 15 days from becoming aware of a change to reflect it in the register. That is the single provision most companies breach without noticing, because they have mentally filed UAE free zone UBO compliance under annual renewal. A share transfer starts the clock. So does a new investor, a director change, a beneficial owner moving house, and, less obviously, a passport renewal, because the register records the document number and its issue and expiry dates and all three change.
Article 7 adds a duty running in the other direction. If it appears that a natural person may be a beneficial owner whose details are not correctly recorded, you must enquire about their status; if 15 days pass with no response you notify them; and if they fail to comply within 15 days of that notification you record the details you believe correct anyway. Silence from a shareholder is not a defence and does not pause your obligation.
Article 11 also requires you to give the Registrar the name, address, contact details and identity document copy for a natural person resident in the UAE authorised to disclose this information on the company’s behalf. When the Registrar then asks for additional data, you have 14 days to supply it. If that named person has left the company, the request lands nowhere and the deadline runs out anyway.
The penalty schedule for UAE free zone UBO compliance punishes process, not intent
Cabinet Decision No. (132) of 2023, issued 15 December 2023, sets the administrative penalties and replaced Cabinet Decision No. (53) of 2021. Read its schedule and the pattern is unmistakable: the heaviest amounts attach to failing to establish and maintain the registers, not to getting a beneficial owner’s identity wrong. Failing to establish the Beneficial Owner’s Register runs to AED 50,000 then AED 100,000, and failing to disclose the ownership layers in a complex structure carries the same. Failing to update a register that does exist is charged at AED 15,000 rising to AED 30,000.
Almost every row opens with a written warning and a correction window of 15 or 30 days, then escalates. One row does not: for failure to establish the Register of Partners or Shareholders the first-time column is blank, and the penalty is stated at AED 50,000 for a second violation and AED 100,000 for a third. On top of any third-time fine, Article 3(2) lets the Registrar suspend the commercial licence and close the commercial store, released only once the fine is paid and the breach corrected.
| Violation | First time | Second time | Third time |
|---|---|---|---|
| Failure to establish the Beneficial Owner’s Register and maintain its data | Written warning, 30 days | AED 50,000 | AED 100,000 |
| Failure to disclose the ownership layers in a complex ownership structure | Written warning, 30 days | AED 50,000 | AED 100,000 |
| Failure to establish the Register of Partners or Shareholders | No warning stage in the schedule | AED 50,000 | AED 100,000 |
| Failure to give the Registrar the nominee director data | Written warning, 30 days | AED 40,000 | AED 80,000 |
| Failure to properly register the beneficial owner’s details, or to include the required Article 8(2) data | Written warning, 15 days | AED 20,000 | AED 40,000 |
| Failure to update the Beneficial Owner’s Register | Written warning, 15 days | AED 15,000 | AED 30,000 |
| Failure to provide additional data requested by the Registrar within 14 days | Written warning, 30 days | AED 15,000 | AED 30,000 |
A dormant entity still carries the obligation until it is properly closed
An unused company is not an exempt company. While the licence exists and the entity remains on the register, UAE free zone UBO compliance continues to bind it, so a shareholder who moves house or renews a passport still starts a 15-day clock on a business that has not traded in two years. The obligation ends when the entity does, which means formal liquidation and deregistration rather than simply letting a licence lapse.
It is also worth keeping UBO reporting separate in your mind from your other financial crime obligations, because it does not replace them. Registration and reporting through goAML, where your activity brings you within scope, sits alongside this framework rather than inside it. What the two share is that the ownership picture you give one authority should match the one you give the other, and the one your bank holds.
What UAE free zone UBO compliance looks like in practice this quarter
Set a quarterly review rather than waiting for a renewal notice. Check whether any shareholder, director or beneficial owner has renewed a passport, changed address or nationality, or altered their holding, and if so update the register and file the change inside the 15-day window. Confirm the UAE-resident authorised contact recorded with the Registrar is still with the company, and that the registers exist in a form an inspector would recognise, structured to the fields Articles 8 and 10 list, and backed up — Article 11(1) makes protecting them a legal duty, and the schedule’s largest exposures are for having no register at all.
Frequently Asked Questions
Who counts as a UBO in a UAE free zone company?
Any natural person who ultimately owns or controls 25 percent or more of the capital or voting rights, directly or through a chain of ownership, or who controls the company by other means such as appointing or dismissing most directors. If no such person can be identified, the senior management official is deemed the beneficial owner.
Are free zone companies exempt from UBO filings?
No. Article 3 of Cabinet Decision 109 of 2023 expressly covers the commercial free zones, so DMCC, JAFZA, RAKEZ, IFZA and comparable zones are in scope. The exemptions cover only government-owned companies and their wholly owned subsidiaries, a Governmental Partner, and the Financial Free Zones.
What happens if I miss the 15-day update deadline?
Failing to update the Beneficial Owner’s Register draws a written warning with 15 days to correct on the first occasion, then AED 15,000 on the second and AED 30,000 on the third. The same failure on the Register of Partners or Shareholders carries identical amounts with a 30-day correction window.
Are DIFC and ADGM entities covered by these rules?
No. Article 3 exempts the Financial Free Zones from Cabinet Decision 109 entirely, and DIFC and ADGM are the two. Both run their own beneficial ownership regimes under their own regulators, so entities there file through those channels rather than the federal framework described here.
What is the largest fine for UBO non-compliance?
AED 100,000, applying to third-time failures to establish either register or to disclose the ownership layers in a complex structure. Article 3(2) also lets the Registrar suspend the commercial licence and close the store on a third violation, released once the fine is paid and the breach fixed.
Does a dormant company still need to maintain UBO records?
Yes. The obligation attaches to the licensed legal person, not to whether it trades, so a dormant entity must keep both registers accurate and update them within 15 days of any change. It ends only on formal liquidation and removal from the register.
Getting this right is mostly a matter of knowing which clock is running and checking it four times a year rather than once. If you are still choosing where to base the entity, that decision also settles which authority you will be filing all of this with. Explore UAE Freezone options today →