Central Bank Digital Currency in the UAE: CBDC Framework

The UAE’s central bank digital currency framework: Project mBridge, the digital dirham, cross-border payments, and the legal steps banks and fintech firms should take.

By Nour Attorneys / 22 August 2026

Reviewed by Mohamed Noureldin, Founder, Managing Partner & Senior Legal Consultant

Central Bank Digital Currency in the UAE: The CBDC Framework

The development of a Central Bank Digital Currency (CBDC) in the United Arab Emirates (UAE) marks a major change in the region’s financial system. As economies around the world explore digital currencies issued and regulated by central banks, the UAE has placed itself at the forefront by building a legal framework that supports the introduction of a digital dirham. The initiative aligns with the UAE’s aim to expand financial inclusion. It also aims to counter the weaknesses built into traditional cross-border payment systems.

The Central Bank of the UAE, working with international counterparts, notably through Project mBridge, has taken an innovative but carefully regulated approach to CBDC implementation. This article examines the legal and regulatory framework governing the central bank digital currency in the UAE. It focuses on Project mBridge, the digital dirham, cross-border implications, and the legal considerations for market participants preparing for this transition.

From a legal perspective, introducing a CBDC brings real challenges. These include regulatory uncertainty, compliance with anti-money laundering (AML) frameworks, and the need for contractual mechanisms that protect the integrity of the financial system. This article analyses each of these elements and explains how the UAE’s regulatory environment is evolving to accommodate the CBDC while maintaining financial stability and legal certainty.

UAE CBDC Initiatives: Project mBridge and the Digital Dirham

The UAE has long been known for developing sophisticated financial solutions. The introduction of the digital dirham, as part of Project mBridge, reflects this approach. Project mBridge is a collaborative initiative involving the Central Bank of the UAE, the Hong Kong Monetary Authority, the Bank of Thailand, and the Digital Currency Institute of the People’s Bank of China. It is designed to test the efficiency of cross-border payments using CBDCs.

The legal frameworks behind Project mBridge are crucial to its success. The UAE Central Bank has built a legal foundation that addresses jurisdictional challenges and data privacy concerns, and ensures compliance with international AML and counter-terrorism financing (CTF) standards. The digital dirham is designed to function as a sovereign digital currency that complements the fiat dirham, with legal tender status ensured by amendments to existing monetary laws.

From a regulatory compliance viewpoint, the initiative requires mechanisms that counter the risks arising from cross-border transactions. These risks include uneven regulatory standards between jurisdictions and the potential for illicit actors to exploit gaps in digital currency frameworks. The UAE’s regulatory agencies have responded by developing tailored supervisory protocols and data-sharing agreements so that Project mBridge operates within a secure legal perimeter.

Legal Framework of Project mBridge

The success of Project mBridge depends on coordinating a legal framework across several jurisdictions. Each participating authority must put in place domestic laws that recognise and accommodate foreign CBDCs within its borders. This requires carefully drafted memoranda of understanding (MOUs) and bilateral treaties that define each participant’s rights and obligations, dispute resolution mechanisms, and data protection protocols.

The UAE has shaped its legal approach so that the issuance and transfer of the digital dirham comply with existing international financial regulations while remaining adaptable as digital currencies evolve. This includes explicit provisions regulating the custody of digital dirhams, the role of intermediaries, and the settlement finality of cross-border transactions.

Practical Implications for Market Participants

For banks and financial institutions operating in the UAE, Project mBridge offers a practical opportunity to use CBDC-based cross-border payment solutions that reduce transaction times and costs. However, these entities must build compliance frameworks that align with the digital dirham’s legal status, including adapting KYC and AML processes to digital identities and transaction tracing.

Fintech companies involved in payment processing and digital wallet services will need contractual agreements that reflect the risks of digital asset theft, fraud, or regulatory non-compliance. For instance, service level agreements (SLAs) must include clauses addressing cybersecurity incidents and liability allocation.

Regulatory Implications and Legal Framework for CBDC in the UAE

Introducing a CBDC in the UAE calls for a re-examination and redesign of the existing regulatory framework governing banking, finance, and digital payments. Central to this is the need to define the legal status of the digital dirham, the roles and responsibilities of intermediaries, and the enforcement mechanisms that apply to digital currency transactions.

The Monetary Law of the UAE, alongside the Central Bank’s regulatory directives, is being revised to explicitly accommodate the issuance and circulation of a CBDC. This legal reform clarifies that the digital dirham holds the same legal tender status as cash and banknotes, removing any legal risks that could arise from a dual currency system. In addition, regulatory compliance standards, including KYC (Know Your Customer) and AML/CTF requirements, are being adapted to the particular features of digital currency flows.

Defining Legal Tender and Ownership

One of the core legal questions in the CBDC framework is the definition of the digital dirham as legal tender. The UAE has amended its Monetary Law to state explicitly that the digital dirham holds legal tender status equal to physical currency. This equivalence means creditors cannot refuse payment in digital dirhams, which removes any enforcement issues arising from disputes over the form of payment.

Ownership rights over digital dirhams are clearly defined. The Central Bank keeps ultimate authority over issuance, while end users retain proprietary rights over the digital currency units held in their wallets. This structure requires intermediaries to comply with fiduciary duties and to put strict custody arrangements in place to prevent risks such as the misappropriation of digital assets.

Licensing and Regulatory Oversight for Intermediaries

Financial institutions and fintech firms operating within the CBDC ecosystem are subject to licensing requirements designed to ensure operational transparency and accountability. The Central Bank of the UAE has developed a licensing regime tailored to the digital currency environment, which covers requirements for cybersecurity standards, operational resilience, and data governance.

Oversight is strengthened through periodic audits and real-time transaction monitoring, designed to prevent misconduct such as money laundering and terrorist financing. The Central Bank’s directives also require intermediaries to set up AML compliance teams trained specifically to handle digital currency transactions, reflecting the distinct risk profiles of CBDCs.

Contractual and Dispute Resolution Considerations

The novelty of CBDC transactions has led to a reassessment of the contractual frameworks governing digital currency services. Contracts must be drafted to address issues such as transaction finality, reversibility, liability for technical failures, and jurisdictional challenges.

Nour Attorneys drafts tailored contractual clauses to ensure clarity on these points, including arbitration clauses that specify neutral venues and applicable laws to head off contentious litigation. Contracts are also designed to account for the risks inherent in distributed ledger technologies, such as forks or software bugs, by providing remedies and mitigation strategies.

Cross-Border Payment Systems and Their Risks

One of the challenges the UAE CBDC framework seeks to address is the uneven risk profile of cross-border payment systems. Traditional correspondent banking models often involve delays, high costs, and exposure to fraud and money laundering. The digital dirham, introduced through Project mBridge, aims to create a more efficient and secure cross-border payment system that reduces these risks.

Legally, cross-border CBDC transactions raise complex jurisdictional issues, including conflicts of laws, data privacy compliance across multiple regulatory regimes, and the enforcement of digital contracts. The UAE is actively developing bilateral and multilateral agreements to set clear legal protocols for cross-border digital currency transfers. These protocols are designed to overcome the uneven enforcement capabilities that often affect international financial transactions.

Jurisdictional and Enforcement Challenges

Cross-border CBDC transactions inherently involve multiple legal regimes, each with its own regulatory requirements, data protection laws, and enforcement mechanisms. These differences create risk: a transaction that is lawful in one jurisdiction may be prohibited or restricted in another, or the enforcement of contractual rights may become uncertain.

To address this, the UAE has been at the forefront of developing legal frameworks that harmonise regulatory standards with partner countries. This includes the creation of joint supervisory committees and dispute resolution panels that operate with clear mandates and authority, resolving jurisdictional conflicts that could undermine the integrity of cross-border CBDC operations.

Data Privacy and Cybersecurity Considerations

Cross-border CBDC operations also raise significant data privacy concerns, particularly given the strict data protection laws in jurisdictions such as the European Union and Hong Kong. The UAE has developed data-sharing protocols that respect these privacy standards while allowing the necessary exchange of AML/CTF information.

Cybersecurity remains a critical risk, as digital currencies are attractive targets for hackers and fraudsters. The UAE Central Bank requires all participants in the CBDC ecosystem to implement advanced cybersecurity measures, including multi-factor authentication, encryption, and continuous system monitoring. Legal agreements require swift incident reporting and cooperative responses to cyber threats, ensuring a unified defence against cyberattacks.

Practical Example: Trade Finance

Trade finance illustrates how the digital dirham can be used across borders. The digital dirham can be used to settle invoices between UAE importers and foreign exporters, dramatically reducing settlement times and costs compared with traditional correspondent banking.

Legally, this involves drafting contracts that recognise digital dirham payments as fulfilling obligations, with clear protocols for dispute resolution and risk allocation. By countering the risks of delayed payments or currency conversion disputes, the digital dirham enhances the efficiency and legal certainty of international trade.

Legal Strategies for Preparing for UAE CBDC Implementation

Market participants looking to engage with the UAE CBDC must build legal strategies that anticipate regulatory shifts and operational challenges. This preparation involves carrying out comprehensive risk assessments, developing compliance programmes, and drafting contracts that accommodate the new features of digital currencies.

Financial institutions should prioritise aligning their internal governance structures with the evolving regulatory environment, ensuring that directors and officers understand their legal obligations in the context of CBDC transactions. Nour Attorneys provides specialised advisory services in banking and finance law, regulatory compliance, and contract drafting tailored to the CBDC landscape, helping clients counter potential legal exposure.

Governance and Compliance Programmes

Institutions must develop internal governance policies that reflect the new legal realities introduced by CBDCs. This includes creating specialised compliance units responsible for continuously monitoring CBDC transactions, ensuring adherence to AML/CTF standards, and managing regulatory reporting obligations.

Training programmes for board members and executives are essential to mitigate risks arising from non-compliance or operational errors. These programmes should cover the legal status of CBDCs, regulatory expectations, and the implications of digital asset management.

Contract Design and Dispute Resolution

Given the particular risks in the digital currency space, contracts must be drafted precisely to address issues such as transaction finality, liability for technical failures, data privacy commitments, and jurisdictional clarity. Arbitration clauses should specify neutral venues and applicable laws, with the aim of avoiding costly and protracted litigation.

Nour Attorneys designs tailored dispute resolution frameworks, including hybrid models that combine arbitration with expert determination for technical disputes. This approach ensures that conflicts are resolved efficiently and with the necessary technical expertise.

Technology and Operational Readiness

Legal preparedness must be matched by operational readiness. Institutions need technology solutions that integrate with the CBDC infrastructure while complying with legal requirements. This includes secure digital wallets, transaction monitoring systems, and audit trails that meet regulatory standards.

Legal teams should work closely with technology providers to draft service agreements that allocate responsibility and liability clearly, countering the risks arising from system failures or breaches.

Legal Challenges and Future Outlook for the UAE CBDC

The introduction of the digital dirham and participation in Project mBridge expose the UAE to a range of legal challenges that require continuous monitoring and adaptation. Issues such as data sovereignty, privacy rights, cybersecurity threats, and regulatory arbitrage are obstacles that must be designed out of the CBDC framework.

The threat of cyberattacks on CBDC infrastructure means that the UAE’s central bank, financial institutions, and technology providers must adopt rigorous cybersecurity protocols. These protocols must be built into legal agreements and compliance programmes to ensure accountability and rapid response capabilities.

Data Sovereignty and Privacy

Data sovereignty remains a complex legal issue, especially in cross-border CBDC transactions where transaction data may pass through multiple jurisdictions. The UAE has taken a cautious approach, putting in place data localisation requirements and privacy safeguards that comply with international standards such as the GDPR, while allowing for necessary regulatory oversight.

Legal instruments are being developed to define data ownership, permitted uses, retention periods, and conditions for cross-border transfers. These measures help counter the risks that arise where conflicting privacy laws could otherwise impede CBDC operations.

Cybersecurity and Incident Response

Cybersecurity threats pose serious challenges, given the hostile nature of cybercriminals. The UAE’s regulatory framework requires CBDC participants to implement layered security measures, including encryption, real-time transaction monitoring, and incident response protocols.

Legal agreements require parties to conduct regular cybersecurity audits and to cooperate in incident investigations. This integrated approach ensures accountability and the rapid containment of threats, protecting the integrity of the CBDC ecosystem.

Regulatory Arbitrage and International Cooperation

The risk of regulatory arbitrage, where actors exploit differences in regulation between jurisdictions, poses a serious threat to the CBDC framework. The UAE actively works with international bodies to harmonise regulatory standards and enforcement mechanisms.

Through multilateral treaties and joint supervisory arrangements, the UAE aims to stop bad actors from exploiting regulatory gaps, ensuring that the digital dirham is not used for illicit purposes.

Future Legal Developments

The UAE’s legal system is expected to continue evolving in response to technological advances and emerging risks associated with CBDCs. This evolution will likely include new legislation addressing smart contracts, digital identity verification, and enhanced dispute resolution mechanisms.

Nour Attorneys remains at the forefront of these developments and is ready to develop legal solutions that adapt to the changing landscape, helping clients navigate future challenges with confidence.

Related Services: Explore our bank debt recovery in the UAE and bank account opening services for practical legal support in this area.

Conclusion

The UAE’s central bank digital currency framework represents a significant evolution in the region’s financial and legal landscape. Through Project mBridge and the digital dirham, the UAE is introducing legal and regulatory solutions designed to counter the risks inherent in cross-border digital currency transactions. Market participants must build compliance and governance frameworks in advance that align with these developments.

Nour Attorneys stands ready to develop comprehensive legal strategies that support clients in navigating this complex environment. Through contractual and regulatory compliance mechanisms, and tailored dispute resolution frameworks, Nour Attorneys ensures that clients are legally prepared to engage confidently with the UAE’s CBDC ecosystem.

Disclaimer

This article is for informational purposes only and does not constitute legal advice.

Our Related Services

Contact Nour Attorneys

To plan your legal approach to the UAE’s CBDC framework, contact Nour Attorneys for expert advice and representation in banking, finance, and regulatory compliance.
Explore our banking disputes services and find legal solutions tailored to your needs.

Explore more of our insights on related topics: