UAE insurers, banks, and fintech firms face a September 16, 2026, deadline to align with the country's landmark consolidated Central Bank Law (Federal Decree-Law No. 6 of 2025), which came into force in September 2025. The overhaul consolidates banking and insurance regulation under the CBUAE, widens the regulatory perimeter to capture insurtech and digital platforms, and raises the maximum administrative fine fivefold to AED 1 billion.
The United Arab Emirates' financial sector is in the midst of one of the most significant regulatory transformations in over a decade, as firms work toward a September 16, 2026, compliance deadline under the new consolidated Central Bank Law. Federal Decree-Law No. 6 of 2025 came into force on September 16, 2025, and granted affected entities a one-year transition period to reconcile their operations with the new framework.
The law represents a comprehensive overhaul of the UAE's financial and insurance regulatory architecture. It expressly repealed both the old 2018 Central Bank Law and the 2023 Insurance Law, meaning insurance regulation no longer sits in a standalone statute โ it is now consolidated within the CBUAE framework alongside banking, payment services, and open finance. This follows the 2020 merger of the former Insurance Authority into the Central Bank of the UAE (CBUAE).
Three structural changes carry the greatest weight for insurers and their compliance teams. First, the regulatory perimeter has widened significantly: the law enumerates licensed financial activities to include insurance, reinsurance, takaful, and re-takaful, and captures any person who carries out, offers, or facilitates a licensed financial activity through any medium or technology. This brings insurtech platforms, decentralized distribution applications, and infrastructure providers that previously sat in a regulatory grey zone firmly within CBUAE jurisdiction. Second, the penalty ceiling has risen dramatically โ from AED 200 million under the old law to AED 1 billion โ with criminal liability introduced for unlicensed financial activity. Third, the law strengthens the CBUAE's supervisory and early-intervention powers, positioning it as a 'Resolution Authority' able to manage financial crises through recovery plans, capital requirements, and, if necessary, the takeover, merger, or liquidation of distressed institutions.
While existing licenses remain valid under transitional provisions, the substantive compliance work sits below the license layer. In-house counsel and compliance officers at UAE insurers must conduct comprehensive gap analyses against the consolidated framework, map activities involving virtual assets and enabling technologies, strengthen governance and board oversight, and upgrade conduct, transparency, and consumer-protection frameworks. The CBUAE retains discretion to extend the transitional period if it deems appropriate, but firms are advised to treat September 16, 2026, as the operative deadline. The reform reflects the UAE's ambition to cement its position as a leading global financial hub aligned with the highest international standards.
Key Points
- 1UAE firms face a September 16, 2026, deadline to comply with the new consolidated Central Bank Law
- 2The law repealed the 2018 Central Bank Law and the 2023 Insurance Law, consolidating regulation under the CBUAE
- 3The regulatory perimeter now captures insurtech, takaful, and digital distribution platforms
- 4The maximum administrative fine rose fivefold to AED 1 billion, with criminal liability for unlicensed activity
- 5The CBUAE gains strengthened early-intervention and resolution powers over distressed insurers
Why This Matters
The UAE is one of the Middle East's most important insurance and financial markets, and this consolidation aligns its framework with global standards while tightening oversight. For insurers and insurtech firms operating in the UAE, the September deadline requires substantial compliance work โ from gap analyses to governance upgrades. The dramatically higher penalties and expanded scope signal that the CBUAE intends to enforce robustly. For policyholders and consumers, the strengthened framework enhances protection and market stability in a rapidly growing financial hub.
Original Source
Norton Rose Fulbright / Kayrouz & Associates โRelated Stories
Australia's APRA CPS 230 Operational Risk Amendments Take Effect July 1, 2026
June 20, 2026
Australia's APRA CPS 230 Operational Risk Amendments Take Effect July 1 as Insurers Race to Comply
June 18, 2026
India's IRDAI Proposes New Framework for Transparent Regulation-Making and Public Consultation
June 17, 2026
Australia's APRA CPS 230 Operational Risk Standard Takes Effect July 1 as Insurers Race to Comply
June 18, 2026
Daily Intelligence
The PolicyGlobal Daily Brief
Get the top 5 insurance and finance stories every morning, curated and verified by our editorial desk. No spam. Unsubscribe anytime.
Informational newsletter only. Not financial advice. Disclaimer