Banking Regulations in Abu Dhabi Mainland: Complete Guide

A bank, finance company, exchange house or payment provider operating in Abu Dhabi outside the Abu Dhabi Global Market answers to federal UAE law and to the Central Bank of the UAE. That starting point decides most of what follows: who issues the licence, which rules a contract is read against, which court hears a dispute, and what has to be in the file when a supervisor asks to see it.

This guide sets out how those pieces fit together on Abu Dhabi mainland, what the recurring obligations look like in practice, and where firms most often get caught out.

Mainland Abu Dhabi and ADGM are separate systems

The Abu Dhabi Global Market is a common-law jurisdiction with its own courts and its own financial services regulator, the Financial Services Regulatory Authority. A firm licensed there follows ADGM rules and litigates in ADGM courts. Mainland Abu Dhabi does not work that way. Federal legislation applies, the Central Bank supervises licensed financial activity, and court proceedings run before the Abu Dhabi Courts in Arabic.

The distinction matters before anything is signed. A group with a regulated entity in ADGM and a servicing or holding arm on the mainland carries two sets of obligations, not one. Documents drafted for the ADGM entity rarely transfer unchanged, and a governing law clause does not move an activity outside the regulator's reach if it is carried on onshore.

Two permissions, not one

Most financial businesses on the mainland need more than a trade licence. The commercial licence issued by the Abu Dhabi Department of Economic Development establishes the company and lists the activities it may carry on. Authorisation from the Central Bank is a separate question and attaches to the regulated activity itself. Holding one without the other is a common and expensive error, and it is usually discovered at the worst moment: when a bank asks for evidence before opening accounts, or when a counterparty challenges the validity of an arrangement it no longer wants.

Corporate form and ownership

Company formation is governed by the Commercial Companies Law, Federal Decree-Law No. 32 of 2021, which replaced Federal Law No. 2 of 2015. The requirement that a UAE national hold 51 per cent of a mainland limited liability company was removed by Federal Decree-Law No. 26 of 2020, and most mainland activities may now be wholly foreign owned, subject to a list of activities treated as having strategic impact. Financial activities frequently carry their own form, capital and ownership conditions under the licensing regime, so foreign ownership should be confirmed against the specific activity applied for rather than assumed from the general rule.

A foreign company registering a branch rather than a subsidiary is in a different position. The local service agent arrangement used for branches was not abolished and remains lawful; it is not the same thing as the ownership requirement that was removed.

What the licence carries with it

Authorisation is a continuing relationship, not a one-off approval. Conditions typically address capital, the suitability of controllers and senior officers, systems and controls, and notification of changes in ownership or management. Changes made first and reported afterwards are a frequent source of findings. If a shareholder is replaced or an activity added, check whether prior approval is needed before the change takes effect.

The compliance file a supervisor expects to find

Anti-money laundering and counter-terrorist financing controls sit at the centre of financial supervision in the UAE. In practice that means documented customer due diligence, identification of beneficial owners, screening against applicable sanctions lists, enhanced measures for higher-risk relationships, and reporting of suspicious transactions to the Financial Intelligence Unit. Records must be retained for the period the applicable rules specify, and they must be retrievable, not merely kept.

Around that sit governance requirements: a board that can show it actually supervised, a compliance function with authority and access, a money laundering reporting officer, internal audit coverage, and a complaints process customers can use. Outsourcing, including cloud hosting and offshore processing, needs contractual terms that preserve the firm's ability to supervise the provider and give the regulator access to records.

The recurring weakness is not the absence of policies. It is the gap between the policy and the evidence: a customer risk rating with no rationale recorded, an escalation that no one signed off, a screening tool nobody has reviewed since installation.

Contracts, security and enforcement

Commercial dealings, including banking transactions, are governed by the Commercial Transactions Law, Federal Decree-Law No. 50 of 2022, which replaced Federal Law No. 18 of 1993. Facility agreements, guarantees and security documents meant to be enforced before the Abu Dhabi Courts should be prepared with enforcement in mind from the outset: an Arabic version, signatories whose authority can be evidenced from the corporate documents, and powers of attorney in the form the courts and registries accept.

Choosing the forum

Arbitration is governed by Federal Law No. 6 of 2018, as amended in 2023. Institutional choices have changed. The DIFC-LCIA Arbitration Centre was abolished by Dubai Decree No. 34 of 2021 and its caseload moved to the Dubai International Arbitration Centre, while the Abu Dhabi Commercial Conciliation and Arbitration Centre was restructured as arbitrateAD from 2024. Template clauses naming an institution that no longer exists are still circulating and should be reviewed in any live agreement.

Customer data and confidentiality

Personal data handled by a mainland entity falls under Federal Decree-Law No. 45 of 2021, the personal data protection law. DIFC and ADGM operate their own data protection regimes, which is another reason a single group policy written for one of those centres does not automatically satisfy the mainland entity's obligations.

Confidentiality duties owed to customers sit alongside the data protection rules and are not displaced by them. Disclosure to a parent company, a service provider or an overseas affiliate needs a proper basis and a contract that binds the recipient. Requests from authorities should run through a defined internal channel, so that what was disclosed, to whom and on what footing can be reconstructed later.

Tax obligations that apply to the entity

Corporate tax was introduced by Federal Decree-Law No. 47 of 2022 and applies for financial years starting on or after 1 June 2023. Taxable income up to AED 375,000 is taxed at 0 per cent and income above that threshold at 9 per cent. Descriptions of the UAE as tax-free are simply out of date. VAT applies at 5 per cent under Federal Decree-Law No. 8 of 2017, as amended by Federal Decree-Law No. 18 of 2022.

The Economic Substance Regulations were cancelled for financial years ending after 31 December 2022 by Cabinet Decision No. 98 of 2024. Obligations remain only for the financial years 2019 to 2022, which still matters for firms in that period that filed late, filed nothing, or have an open query.

Where disputes actually start

Most financial disputes on the mainland trace back to something ordinary: an activity carried on outside the scope of the licence, a security document that cannot be enforced as drafted, a customer file that cannot evidence the decisions taken, or a forum clause pointing at an institution that has been replaced. Each is cheaper to fix in advance than to argue about afterwards, and firms that keep licence scope, documentation and records aligned spend far less time on financial dispute resolution.

Conclusion

Working under Abu Dhabi mainland rules comes down to a short list of questions. Which authority licenses this activity, and does the licence cover what the business actually does? Can the compliance file evidence the decisions behind each relationship? Are the financing and security documents enforceable in the forum they name? Do the tax and data positions reflect the current federal legislation? Firms that can answer those from their own records are in a very different position when a supervisor or a court asks the same thing.

For guidance on licensing, compliance frameworks or financial documentation in Abu Dhabi, contact the Nour Attorneys team.

Schedule Your Consultation

Disclaimer: The information provided in this article is for general informational purposes only and does not constitute legal advice. Readers should seek professional legal advice tailored to their specific circumstances before making any decisions or taking any action based on the content of this article.

Nour Attorneys Team

Related Resources

Explore more of our insights on related topics:

• Banking Regulations Compliance in the UAE
• Fintech Legal Frameworks for Dubai Businesses
• Anti-Money Laundering Compliance for UAE Investors
• Investment Advisory Strategies for Multinational Entities