← Insights

الامتثال للعقوبات الدولية الإمارات: ما يجب على الشركات معرفته لتجنب المخاطر

الامتثال للعقوبات الدولية الإمارات يتطلب من الشركات تطبيق برامج فحص ومراقبة وتوثيق المتطلبات الفيدرالية والجهات المختصة.

يشرح المقال الالتزامات الأساسية التي تفرضها القوانين الإماراتية على الشركات فيما يتعلق بالعقوبات الدولية، بما في ذلك تقييم المخاطر، الفحص، السياسات الداخلية، التدريب والإبلاغ. يوضح خطوات تصميم برنامج امتثال فعال، والعقوبات المحتملة لعدم الامتثال، والإجراءات الواجب اتخاذها عند اكتشاف انتهاك محتمل، مع ذكر المتطلبات الخاصة للشركات العاملة في المناطق الحرة. يأخذ القارئ نظرة شاملة على كيفية تجنب المخاطر القانونية والمالية والحفاظ على سمعة الشركة.

Reviewed by Mohamed Noureldin, Founder, Managing Partner & Senior Legal Consultant

الامتثال للعقوبات الدولية في دولة الإمارات يتطلب من الشركات الالتزام بقرارات مجلس الأمن الدولي التي تُنفّذ عبر التشريع الفيدرالي الإماراتي، بالإضافة إلى القرارات الوزارية والتوجيهات الصادرة عن مصرف الإمارات المركزي والسلطات المختصة، مع فحص جميع الأطراف والمعاملات والحصول على التراخيص اللازمة والحفاظ على السجلات التي تُظهر الالتزام بهذه القواعد.

Related Services: Explore our Data Protection Officer Service and Data Regulation & Compliance services for practical legal support in this area.

ما هي الالتزامات الأساسية التي تفرضها القوانين الإماراتية على الشركات فيما يتعلق بالعقوبات الدولية؟

UAE law obliges companies to implement a sanctions-compliance programme that includes risk assessment, screening, internal controls, training, and reporting. The programme must be proportionate to the size, nature, and complexity of the business and to the sanctions risk it faces. Companies are required to screen all relevant parties-including clients, suppliers, intermediaries, and beneficial owners-against the consolidated lists published by the United Nations and any UAE-specific lists issued by the Cabinet or the Executive Office. Screening must occur before entering into a business relationship and be updated periodically, at least annually or when a significant change in the risk profile occurs. Internal controls should cover transaction monitoring, approval workflows for high-risk deals, and procedures for freezing assets or rejecting transactions that involve a sanctioned party. Training must be provided to employees whose roles involve compliance, sales, finance, or procurement, and records of attendance and content must be retained. Finally, any suspicion of a breach must be reported to the relevant authority-typically the UAE's Financial Intelligence Unit-within the timeframe set out in the applicable legislation.

كيف يمكن للشركات تصميم برنامج امتثال فعال للعقوبات الدولية؟

An effective programme begins with a documented risk assessment that identifies the products, services, geographic markets, and counterparties that expose the firm to sanctions risk. Based on this assessment, the company should develop written policies and procedures that set out screening standards, approval thresholds, escalation paths, and record-keeping requirements. The policies must be approved by senior management and communicated throughout the organisation. Technology solutions-such as automated screening tools that integrate with enterprise resource planning or customer-relationship-management systems-can improve accuracy and reduce manual effort, but they must be tested regularly to ensure they capture updates to sanctions lists. Internal audits or independent reviews should be conducted at least once a year to verify that controls are operating as intended and to identify any gaps. The findings of these reviews must be documented, and remedial actions tracked to completion. All programme components-risk assessment, policies, training records, screening logs, and audit reports-should be retained for a minimum of five years, unless a longer period is prescribed by sector-specific regulations.

ما هي العواقب المحتملة لعدم الامتثال لمتطلبات العقوبات الدولية في الإمارات؟

Failure to comply with UAE sanctions obligations can result in administrative penalties, civil liability, and criminal sanctions. Administrative fines may be imposed by the regulator responsible for overseeing the specific sector-for example, the Central Bank for financial institutions or the Department of Economic Development for trading companies-and can amount to a percentage of the turnover involved in the breach or a fixed sum, depending on the nature of the violation. Civil liability may arise if a third party suffers loss because the company facilitated a transaction with a sanctioned entity, leading to claims for damages. Criminal sanctions can include imprisonment for responsible individuals, particularly where the breach is found to be willful or involves fraudulent concealment. In addition to legal penalties, non-compliance can trigger reputational harm, loss of banking relationships, exclusion from government contracts, and increased scrutiny from international partners. The severity of the outcome depends on factors such as the magnitude of the violation, the company's cooperation with investigators, and the existence of an effective compliance programme at the time of the breach.

ما الخطوات التي يجب على الشركة اتخاذها عند اكتشاف انتهاك محتمل للعقوبات؟

When a potential breach is identified, the company must act promptly to contain the risk, preserve evidence, and assess the need for voluntary disclosure. The first step is to halt any ongoing transaction that involves the sanctioned party and to isolate the relevant records, emails, and contracts. An internal investigation should be launched, ideally under the supervision of the compliance officer or an external counsel, to determine the facts, the extent of any violation, and whether any individuals acted with intent. If the investigation confirms a breach, the company should consider making a voluntary disclosure to the appropriate authority-such as the UAE's Financial Intelligence Unit or the relevant sector regulator-because cooperation can mitigate penalties. Throughout the process, legal privilege must be protected, and all communications related to the investigation should be marked accordingly. After the matter is resolved, the company must update its risk assessment, revise policies and procedures, and provide additional training to prevent recurrence.

هل هناك متطلبات خاصة للشركات العاملة في المناطق الحرة فيما يتعلق بالعقوبات الدولية؟

Companies established in UAE free zones are subject to the same federal sanctions legislation as mainland entities, but they may also need to comply with the rules of the specific free-zone authority. Free-zone regulators often require licence holders to submit an annual compliance declaration confirming that screening procedures are in place and that no sanctioned parties have been engaged. Some free zones maintain their own lists of restricted parties that supplement the UN-based lists, particularly for sectors such as oil and gas, commodities, or high-technology exports. Therefore, a free-zone company must verify both the federal obligations and any additional requirements set out in the licence agreement and the free-zone's operational manual. Failure to meet free-zone-specific obligations can lead to fines, suspension of the licence, or cancellation of the establishment contract, in addition to any federal penalties.

ما هي أفضل الممارسات لحفظ السجلات وإثبات الامتثال للعقوبات؟

Records that demonstrate compliance should be complete, accurate, and readily accessible for inspection by regulators. Essential documents include the written risk assessment, approved policies and procedures, training attendance sheets and materials, screening logs showing the date, the tool used, the result, and any escalation actions taken, approval records for high-risk transactions, and internal audit or review reports. Electronic records must be protected against tampering and backed up in accordance with the company's data-retention policy. Where original documents are in Arabic, English translations may be kept for convenience, but the Arabic version remains the authoritative record under UAE law. Retention periods vary by sector; for financial institutions, the Central Bank typically requires retention of compliance records for at least five years after the end of the customer relationship, while other industries may follow the general commercial-code limitation of five years from the date of the transaction. Companies should consult the relevant regulator's guidance to confirm the exact duration applicable to their activities.

FREQUENTLY ASKED QUESTIONS

ما هو الإطار القانوني الذي ينظم العقوبات الدولية في الإمارات؟
The primary legal framework consists of federal legislation that implements United Nations Security Council resolutions, supplemented by Cabinet decisions and regulatory notices issued by the Central Bank of the UAE, the Securities and Commodities Authority, and other sector regulators. The Arabic text of UAE legislation as published in the Official Gazette prevails over any translation.

هل تحتاج الشركات إلى الحصول على ترخيص خاص للتعامل مع كيانات مدرجة على قوائم العقوبات؟
Generally, dealing with a sanctioned person or entity is prohibited unless a specific licence or exemption has been granted by the competent authority. Companies must seek prior approval before engaging in any transaction that would otherwise breach the sanctions regime.

ما هي العقوبات الإدارية التي قد تواجهها الشركات بسبب انتهاك العقوبات؟
Administrative fines are determined by the regulator overseeing the sector and can be calculated as a percentage of the transaction value or as a fixed sum, depending on the nature and gravity of the violation. The exact amount is specified in the relevant regulator's enforcement guidance.

كم مرة يجب على الشركات تحديث قوائم الفحص الخاصة بالعقوبات؟
Screening lists must be updated at least whenever a new United Nations sanctions resolution is adopted or when the UAE issues an amendment to its national sanctions list. In practice, many firms implement daily or weekly automated updates to ensure continuous compliance.

هل يمكن للشركات الاعتماد على برامج طرف ثالث لفحص العقوبات دون إجراء مراجعة داخلية؟
While third-party screening tools can enhance efficiency, the company remains responsible for the accuracy of the results. Internal validation-such as periodic sampling, manual spot checks, and independent audits-is required to confirm that the automated system is functioning correctly.

ما هو المدة الزمنية المطلوبة للإبلاغ عن انتهاك محتمل للعقوبات للسلطات المختصة؟
The UAE's Financial Intelligence Unit expects suspicious activity reports to be submitted as soon as practicable, and in any event within five business days of detecting the suspicious transaction, unless a shorter period is stipulated by sector-specific regulations. The precise deadline is outlined in the AML/CFT guidance issued by the Central Bank.

If your matter involves الامتثال للعقوبات الدولية الإمارات in the United Arab Emirates, you are welcome to request a consultation with Nour Attorneys. Our team can assess your position under the law currently in force and outline the options available to you. Request a consultation

This article is provided for general informational purposes only and does not constitute legal advice. Reading this article or contacting Nour Attorneys through this website does not create an attorney-client relationship; such a relationship arises only after a conflicts-of-interest check and a signed engagement agreement. Do not send confidential information through this website; information submitted before engagement is not protected by legal privilege. Past results do not guarantee future outcomes. The firm's lawyers practice in the jurisdictions stated in their individual profiles; this article addresses the law of the United Arab Emirates only.

DISCLAIMER

This article is for informational purposes only and does not constitute legal advice.

الامتثال للعقوبات الدولية الإمارات: ما يجب على الشركات معرفته لتجنب المخاطر
Call Us NowChat With Our Team On WhatsApp