How UAE Fintech Startups Must Navigate Three Regulators and Compliance Rules
The UAE fintech landscape is governed by three separate regulatory bodies: the Central Bank of the UAE (CBUAE) for the mainland, the DFSA for the DIFC, and the FSRA for the ADGM, each with distinct licensing requirements. A fintech's jurisdiction depends on where it is incorporated and the financial activities it conducts, making the choice of structure a critical early decision. Regardless of jurisdiction, all fintechs handling personal data of UAE residents must comply with Federal Decree-Law No. 45 of 2021, the UAE Personal Data Protection Law. Engineering teams must implement eKYC workflows, immutable audit logging, data residency controls, and encryption from the outset to meet non-negotiable compliance obligations. Entities licensed under DIFC or ADGM that wish to serve UAE mainland customers typically require separate CBUAE authorisation in addition to their existing registration.
This is an AI-generated summary. ShortSingh links to the original source for the complete article.
Discussion (0)
Log in to join the discussion and vote.
Log in