The question directors ask most often in MEIoD sessions is rarely about strategy. It is some version of the same sentence: if this goes wrong, what happens to me. Until recently the honest answer in the UAE involved a degree of guesswork. Federal Decree-Law No. 20 of 2025, which amends the Commercial Companies Law, removed a good deal of that ambiguity. It updated more than fifteen articles and added one new provision, and it did so in a direction that is unmistakable: directors are now treated as active fiduciaries, the standard of care is written down, and the evidence of whether a director met it is the corporate record. The amendment does not create a new liability regime out of nothing. It sharpens an existing one, and it removes the defence that a duty was unclear. Boards that run on informal process are the ones carrying the new exposure, which is why independent directors in particular need to understand where their personal position now sits.
What did Federal Decree-Law No. 20 of 2025 actually change for directors?
The Amending Law was issued on 1 October 2025, published in the Official Gazette on 14 October 2025 and took effect the day after publication, with the practical compliance date for most boards falling in the 2026 financial year. It preserves the architecture of Federal Decree-Law No. 32 of 2021 rather than replacing it. Five changes matter directly to a director’s personal position.
Change | What it means for a director | Practical consequence |
|---|---|---|
Expanded duties | Duties now expressly include acting with due care and acting in the best interests of the company | The standard is statutory, so a director cannot argue the duty was undefined |
Related-party disclosure | Directors must disclose related-party transactions above statutory thresholds | Non-disclosure is a breach in itself, separate from whether the transaction was fair |
Independent directors | Certain categories of company may be required to appoint independent directors | Board composition becomes a compliance question, not only a best-practice one |
Record-keeping obligations | Board minutes, conflicts-of-interest registers and prescribed governance disclosures are required | The record is now the evidence of compliance, and its absence is itself a failure |
Strengthened penalties | Penalties tightened for disclosure failures, inaccurate records and related-party breaches | Exposure attaches to process failures, not only to bad commercial outcomes |
There is a sixth change that is easy to miss and unhelpful to discover late. Corporate officers are expected to oversee compliance programmes, internal controls and risk management. That is an oversight duty with a named owner, and it runs in parallel with the audit committee’s own internal controls mandate rather than replacing it.
What is the standard of care a UAE director is actually held to?
The Commercial Companies Law sets the benchmark through the prudent person test. A person authorised to manage a company must preserve its rights and exercise due care and diligence for the benefit of the company as would be expected from a prudent person, and must act consistently with the company’s objectives and within the powers granted.
Three features of that test are worth reading closely. It is objective, so a director’s personal inexperience is not a defence. It is continuous, so it applies between meetings and not only inside them. And it is individual, so it attaches to each director separately rather than to the board as a collective. The amendments reinforce a fourth point that directors most often get wrong in practice: delegating an operational responsibility does not transfer the supervisory duty. The board retains final responsibility, so a director who relied on management without testing what management said has not discharged the duty by pointing at the delegation.
Where insolvency becomes foreseeable, the orientation of the duty shifts. The obligation moves from promoting the company’s success for shareholders toward protecting the interests of creditors, and it does so by operation of law rather than by board resolution. Directors who continue to trade through that transition without documenting the basis for doing so are in the most exposed position the law creates, and the warning signs usually appear in board papers well before they appear in the accounts.
Through what channels can a UAE director be held personally liable?
Three, and they operate independently. A director can face all three arising from one set of facts.
1. Civil claims, brought by the company itself or by shareholders, seeking damages for loss caused by a breach of duty. Minority shareholders are the most common claimants where a related-party transaction was approved without proper disclosure.
2. Administrative penalties, imposed by regulators for disclosure failures, inaccurate records and breaches of the related-party provisions. These do not require anyone to prove loss, which makes them the fastest route to consequences.
3. Criminal liability, under the Commercial Companies Law and related penal provisions, reaching fraud, abuse of power, unlawful distributions and, separately, personal exposure under anti-money-laundering and sanctions rules.
Two further points sit alongside these. Unlawful distributions carry specific exposure: no fictitious profits may be distributed, and the board is liable to shareholders and to the company’s creditors where that happens. And directors may be held jointly liable for indemnification where governance resolutions are breached, meaning liability does not always divide neatly by who did what. Joint exposure is what makes the tone a board sets a personal matter rather than a cultural one.
Why does the corporate record now decide the outcome?
Because the amendments tightened penalties for inaccurate records at the same time as they tightened duties, and because a duty of care is proved or disproved by contemporaneous evidence. Where a board discussion was recorded properly, the minute shows the information the board had, the risks it identified, the advice it took and the reasoning it applied. Where it was not, there is nothing to set against the allegation.
Practitioners advising UAE boards after the amendments make the same point in near-identical terms: liability is increased where governance processes are informal or poorly recorded, and governance failures are increasingly difficult to defend after the fact. That is particularly true for family-owned and closely held companies moving toward institutional ownership, where decisions have historically been made in conversation rather than in session. The separation of family decision-making from company decision-making is the structural fix; the minute is where it becomes provable.
The amendments also gave statutory recognition to electronic signatures for company documentation, including board minutes and resolutions. That removes the last practical excuse for unsigned records in cross-border boards where directors sit in several jurisdictions.
What should a UAE director do in the next 90 days?
Eight actions, in order of how quickly they reduce exposure.
1. Read the company’s articles of association against the amended law. Transitional measures allow time to align governance documentation, board composition and capital arrangements, and that grace period is finite.
2. Establish or refresh the conflicts-of-interest register, and declare interests in writing rather than verbally. Include nil returns, because a nil return is evidence and silence is not.
3. Adopt a written related-party transaction protocol covering identification, disclosure, abstention, approval and record-keeping, and apply it before the transaction completes rather than afterwards.
4. Require that minutes record how each director voted, who abstained, who left the room and what information the board considered. Ask for this as a standing item, in the meeting, so the request is itself minuted.
5. Review the delegation of authority matrix. Confirm no individual can commit the company beyond an authorised limit, and that the limits reflect the company’s current size rather than its size five years ago.
6. Check the directors and officers insurance position, including exclusions, and confirm whether a company indemnity exists and what it actually covers. Notify insurers of the regulatory change.
7. Ask whether the company falls into a category now required to appoint independent directors, and if so, what the plan and timeline are. The corporate secretary should be able to answer this without research.
8. Clarify the exit route. The amendments set out clearer rules on manager resignation, including that a resignation takes effect if the general assembly does not decide on it within thirty days, and a continuity mechanism allowing a board of managers to continue for up to six months where appointments lapse. A director who wants to resign should know the mechanics before needing them.
How do the new deadlock provisions affect a director’s position?
They introduce an outcome that did not previously exist. Where shareholders cannot agree on board appointments, licensing authorities may step in and appoint independent, non-shareholder directors for a period of up to one year. The company must also notify the competent authority when a manager’s term expires, and where governance paralysis continues, the authority may intervene to keep the business operating.
For a sitting director this changes the calculation around a deadlocked board. Failing to resolve an appointment dispute no longer results simply in an awkward vacancy; it can result in a regulator placing directors on the board. Boards that treat succession and appointment planning as an administrative matter rather than a governance one are the ones most likely to meet this provision, which is part of why chair and board leadership succession deserves a formal plan rather than an assumption.
What does this mean for how boards actually operate?
The clearest way to read the amendments is as a transfer of risk from the statute to the process. The law has become more flexible about structure, capital and shareholder arrangements, and considerably less forgiving about documentation quality and governance discipline. It rewards preparation and it penalises informality.
For individual directors, that reframes what competence means. Technical knowledge of the company’s business is necessary but no longer sufficient; understanding the governance mechanics that evidence a decision is now part of the role, which is precisely why practice-based director development has moved from a credential to a working requirement in the UAE market.
Directors who have served for years without incident may find this unnecessary. That view holds until the first claim, at which point the only question that matters is what the record shows. For anyone still working toward a first board seat, this is the part of the role worth understanding before accepting it.
Frequently asked questions
Are directors personally liable in the UAE?
Yes. Directors can face civil damages claims brought by the company or its shareholders, administrative penalties imposed by regulators, and criminal liability for offences including fraud, abuse of power and unlawful distributions. Federal Decree-Law No. 20 of 2025 reinforced each channel and strengthened penalties for disclosure failures, inaccurate records and related-party breaches.
What are a UAE director's core duties?
To act with due care and in the best interests of the company, to exercise the diligence expected of a prudent person, to avoid and disclose conflicts of interest, to disclose related-party transactions above the statutory thresholds, to maintain proper records, and where insolvency becomes foreseeable, to have regard to the interests of creditors.
Does delegating to management reduce a director's liability?
No. Delegating operational duties does not release directors from their supervisory responsibilities. The board retains final responsibility, so a director relying on management must be able to show what was asked, what was reported and what the board did with the answer.
Which law applies, Decree-Law 32 of 2021 or Decree-Law 20 of 2025?
Both. Federal Decree-Law No. 32 of 2021 remains the Commercial Companies Law; Federal Decree-Law No. 20 of 2025 amends it. The amendments preserve the core structure of the 2021 law, and several provisions await implementing regulations, with existing regulations continuing to apply where they do not conflict with the amendments.
Do these changes apply to free zone companies?
The Commercial Companies Law applies to mainland companies. The amendments extend its reach so that branches or representative offices of free zone companies, including those in the Abu Dhabi Global Market and the Dubai International Financial Centre, are subject to the law when they carry on activities in mainland UAE, in addition to their own free zone framework.
