Tax Governance for UAE Boards: Owning the Risk Before the Next FTA Audit

UAE board audit committee reviewing a tax governance framework and transfer pricing documentation ahead of an FTA audit

The UAE Federal Tax Authority’s 2025 annual report, released in July 2026, contains the number every board should have seen. Formal audits rose 46 percent. Around 1.7 million transactions were reviewed, more than 20 percent above the previous year. Total tax revenues reached AED 46 billion, up from AED 41 billion.

The build phase is over. The UAE spent most of a decade legislating, educating and issuing guidance; the authority’s own reporting now describes enforcement as operational and scaling, with corporate tax and transfer pricing named as the next audit frontier. Most GCC boards have no tax item on the agenda between annual filings. That worked when corporate tax was new and the authority was still building. It does not work now, and the first evidence of the change usually arrives as a document request with a thirty-day clock attached, which is exactly the category of early warning sign a board should be catching from the inside.

Why is tax now a board matter rather than a finance one?

Because the consequences have moved outside the finance function’s control. Related-party transactions, connected-person payments, transfer pricing positions, deductibility, exempt income, free zone conditions and permanent establishment questions all affect taxable income, provisions, deferred tax and financial statement disclosures. Where the tax evidence is weak, the effect reaches the audit opinion, which is the board’s problem by definition.

There is a second reason that is specific to how the authority now reads evidence. Guidance issued in April 2026 on identifying connected persons defines an officer functionally rather than by title: a person with authority to plan, direct and control the activities of the taxable person, to make strategic decisions, or to bind the entity, including through a power of attorney or as the manager named on the trade licence. A director is a natural person holding a formal position on the board or an equivalent governing body, and the presence of the word in an operational job title is not sufficient.

Read that carefully and the implication is direct. Establishing where authority actually sits depends on the governance record, so owner and executive remuneration now requires role-based market evidence supported by the board’s own documentation. A minute can determine a tax position, which is not a sentence most boards have had to absorb before, and it raises the practical value of genuine independence on the committee that reviews those payments.

What are the hard deadlines a UAE board should have diarised?

Three regimes run on separate clocks: corporate tax, transfer pricing documentation and the top-up tax for large multinational groups. Confusing them is the most common cause of a missed date.

Obligation

Who it applies to

Deadline

Corporate tax return and payment

All taxable persons

Within 9 months of the end of the tax period

Transfer pricing disclosure form

Filed with the corporate tax return above the reporting thresholds

With the return

Master File and Local File

Entity revenue of AED 200 million or more, or a group with consolidated revenue of AED 3.15 billion or more

Maintained, then produced within 30 days of an FTA request

Country-by-country report

Groups with consolidated revenue of AED 3.15 billion or more

Within 12 months of the last day of the reporting fiscal year

Top-up tax registration

UAE entities of groups with consolidated revenue of EUR 750 million or more in two of the four preceding fiscal years

Within 7 months of the first in-scope fiscal year end, or 30 November 2026 where that year ended before 30 April 2026

Top-up tax return

In-scope entities

Within 15 months of the reporting fiscal year, extended to 18 months for the first transition year

The date closest to hand is the transitional one, and it sits in the same late-year window as the board’s other year-end governance work. Federal Tax Authority Decision No. 12 of 2026, issued on 16 July 2026, fixed 30 November 2026 as the registration deadline for any entity whose first in-scope fiscal year ended before 30 April 2026. That captures every group with a 31 December 2025 year end. Registration runs through the EmaraTax portal, and late registration carries an administrative penalty of AED 10,000 for each entity.

What does the top-up tax actually require of a board?

Cabinet Decision No. 142 of 2024 introduced a domestic minimum top-up tax bringing the UAE effective rate to the 15 percent global minimum for in-scope groups, applying to fiscal years beginning on or after 1 January 2025. Scope is tested at group level: consolidated revenue of EUR 750 million or more in at least two of the four fiscal years immediately preceding the tested year. A UAE subsidiary, branch or joint venture can be in scope even where its own local revenue is modest.

Four features regularly cause boards to reach the wrong conclusion.

1. A safe harbour reduces what the group pays. It does not remove the obligation to register. Entities relying on the transitional country-by-country safe harbour still register.

2. Free zone status does not exclude an entity. A qualifying zero percent rate has no bearing on the registration obligation, and each in-scope entity registers separately.

3. An excluded entity sits outside the charging provisions, but its revenue still counts toward the EUR 750 million threshold. An excluded entity can carry the rest of the group into scope while remaining outside the rules itself.

4. Centralising the filing concentrates the exposure as well as the work. Where a designated filing entity is appointed and fails to register on time, the AED 10,000 penalty applies for each entity it failed to register.

There is narrow transitional relief, and it is narrower than boards assume, and misreading it is the kind of judgement that belongs in front of the full board rather than inside the tax function. For fiscal years beginning on or before 31 December 2026, and not ending after 30 June 2028, no penalty applies to a late top-up tax return or Pillar Two information return where the authority accepts the group took reasonable measures to apply the rules correctly. That relief does not extend to late payment of the tax, and it does not extend to the registration penalty. The board should not treat it as cover.

What separates a tax-ready board from an exposed one?

Timing, mainly. Documentation prepared before a filing or before an audit opens carries materially more weight than documentation assembled in response to a notice. The authority’s tools create a record at the point of submission, and what a company does afterwards is remediation rather than planning. Those are read differently.

The mature UAE groups have stopped treating this as a filing exercise. They are building tax control frameworks, mapping related-party and connected-person transactions, approving pricing policies before transactions occur, documenting the judgements as the business operates, reconciling tax positions to the financial records and giving the audit committee visibility before the year-end audit begins. That does not remove the risk. It makes the risk visible, controlled and defensible, which is the most a board can reasonably ask for.

The failure mode is equally consistent: a folder assembled at the last minute. A local file describing transactions in general terms without functional analysis, comparability data or a reasoned application of the arm’s length principle will not hold. The gap is not between what was filed and what was true, but between what was filed and what would survive examination, and that gap is assessable now rather than after a notice arrives.

What should be on the board’s tax agenda?

Eight questions, asked once a year at minimum and once a quarter in any group with material related-party flows.

1. Do we have a written tax governance framework, with a named owner, that the board has approved?

2. Has the group tested the EUR 750 million threshold across the required four-year window, and if we are in scope, is every UAE constituent entity registered?

3. Are our transfer pricing files current enough to produce within thirty days of a request, and has anyone actually tested that we could?

4. Do our intercompany agreements match actual conduct, and where a management fee is charged, can we evidence the cost basis, the benefit received and the reconciliation to the ledger?

5. How is remuneration paid to owners, founder-directors and connected persons supported, and does the governance record show where authority genuinely sits?

6. What is our exposure if the authority made an adjustment, and is it provided for?

7. Which tax judgements has management made that this board has never seen, and why?

8. Who tells the board first if a notice arrives, and how quickly?

A board that cannot get clear answers to those eight has a disclosed risk it has not quantified, which is the same pattern that shows up in every other governance gap that protects or erodes investor confidence.

Where does tax governance belong in the board calendar?

The natural cycle has three points. Before the year end, review the framework, confirm scope positions and require confirmation that documentation is current rather than intended. Before the return is filed, review the material judgements and the disclosure positions, with the audit committee seeing them before the external auditor does. And after filing, review what the process revealed, including anything that had to be reconstructed.

Late 2026 happens to be an unusually loaded window. The top-up tax registration deadline falls on 30 November 2026, the deregistration transitional deadline falls on 31 December 2026 for entities that ceased to exist before 30 June 2026, and the first top-up tax returns follow in 2027. Building those dates into the annual governance calendar now costs a board one agenda item. Missing them costs AED 10,000 per entity and the harder conversation about why nobody was watching. The distinction that matters is ownership. Tax compliance is management’s job. Tax risk is the board’s, and the difference between the two becomes visible for the first time on the day a notice arrives. Boards that already run a disciplined governance agenda will recognise this as one more line on it; the rest will meet it as a surprise.

Frequently asked questions

Is the board responsible for tax compliance in the UAE?

Management runs tax compliance; the board owns tax risk. Because tax positions affect taxable income, provisions, deferred tax and financial statement disclosures, weak tax evidence can affect the audit opinion, which makes it a board oversight matter. The UAE amendments to the Commercial Companies Law also expect corporate officers to oversee compliance programmes, internal controls and risk management.

A board-approved document setting out who owns tax risk, how tax positions are approved before transactions occur, what documentation is maintained and when, how tax judgements are escalated to the board or audit committee, and what the board reviews at each point in the annual cycle. In practice it is a tax control framework mapped onto the board’s existing risk oversight.

Within seven months of the end of the entity’s first in-scope fiscal year. Under the transitional rule in Federal Tax Authority Decision No. 12 of 2026, entities whose first in-scope fiscal year ended before 30 April 2026, which includes every 31 December 2025 year end, must register by 30 November 2026. Late registration carries an administrative penalty of AED 10,000 per entity.

A taxable person with revenue of AED 200 million or more in the tax period, or one belonging to a multinational group with consolidated revenue of AED 3.15 billion or more, under Ministerial Decision No. 97 of 2023. Neither file is submitted with the return; both must be produced within 30 days of a request from the Federal Tax Authority.

Yes, if it belongs to a group meeting the EUR 750 million consolidated revenue threshold. A qualifying zero percent corporate tax rate does not remove the registration obligation, and each in-scope UAE constituent entity registers separately through EmaraTax.

Share:

Recent posts

SignUp for Newsletter

About MEIoD

Raising the standard of corporate governance in the middle east. We believe that entrepreneurs, business owners, executives, and investors alike benefit significantly from the implementation of effective corporate governance within companies of all sizes across the region.

© 2026 MEIoD. All rights reserved | Powered By Epirco.

Assess Your Governance Readiness

Main valuable insights into your governance strengths and gaps. Start with our quick tools designed to help leaders, businesses, and investors assess their governance maturity.