Federal Decree-Law No. (30) of 2024 Regarding “Know Your Client” Digital Platform

Purpose and legislative background

The decree-law creates a shared, regulated digital KYC infrastructure intended to improve identity/due-diligence efficiency while embedding client approval, data governance and regulatory oversight.

The principal decree-law remains current on the official portal. Cabinet Resolution No. (55) of 2026 introduced the executive regulation and Cabinet Resolution No. (56) of 2026 introduced the administrative-sanctions schedule; both were issued on 20 April 2026 and became effective on 21 April 2026.

Scope and who it applies to

• The company/operator established to create and manage the KYC platform.
• Government and private-sector data providers within the definition and executive regulation.
• Financial institutions, insurance companies and related regulated professions where included as providers/users.
• Users authorised to obtain KYC reports.
• Natural and legal persons whose KYC report is requested with the required approval.

Key definitions

• Platform: the statutory “Know Your Client” digital platform.
• Provider: an authority/entity supplying KYC data to the platform within the statutory and regulatory framework.
• Client: the natural or legal person who approves obtaining a KYC report concerning that person.
• User: an authority/entity entitled to obtain a KYC report under the decree-law and executive regulation.
• Client Approval: prior approval in writing, digitally or by another legally accepted means for the purposes specified by law/regulation.

Main rights and obligations

• Providers must supply/manage data according to the decree-law, executive regulation and codes of conduct.
• Users may obtain and use reports only within the authorised framework.
• Client approval must be obtained where required before a KYC report is issued/used.
• The platform/company must operate the data lifecycle and service under statutory governance and supervision.

Procedures and compliance

1. Determine whether an entity is an authorised provider or user under the executive regulation.
2. Obtain and record valid client approval through an accepted method.
3. Request/provide data through the platform using the prescribed data and security controls.
4. Apply the 2026 executive regulation for report issuance, corrections, access and operational governance.
5. Maintain evidence of compliance with privacy, AML/CFT and KYC obligations.

Deadlines and time limits

• Issued date: 1 October 2024.
• Article 20: the principal decree-law takes effect on its Official Gazette publication date; the exact publication date was not entered in the manifest because it was not sufficiently verified in the official source results used for this package.
• Cabinet Resolution No. (55) of 2026 and Cabinet Resolution No. (56) of 2026 became effective on 21 April 2026.

Enforcement, violations and penalties

Article 18 provides for judicial-enforcement officers. Cabinet Resolution No. (56) of 2026 contains the current administrative-violation and sanction schedule; exact sanctions should be taken directly from that schedule.

Important distinction: Penalties and enforcement powers must be taken from the enacted article and any current implementing resolution. Practical commentary in this file explains the framework but does not create additional duties or sanctions.

Practical scenarios

1. A bank using the platform should verify that its access purpose and client-approval flow match the executive regulation and AML/CFT obligations.
2. A data provider receiving a correction issue should follow the platform's prescribed governance process rather than informally altering records.
3. A business cannot treat a KYC report as permission for unlimited secondary use of personal data.
4. A compliance team should map the KYC platform process to the 2025 AML/CFT regime, 2025 Central Bank law and Personal Data Protection Law.

Amendments and related legislation

The principal decree-law remains current on the official portal. Cabinet Resolution No. (55) of 2026 introduced the executive regulation and Cabinet Resolution No. (56) of 2026 introduced the administrative-sanctions schedule; both were issued on 20 April 2026 and became effective on 21 April 2026.

What businesses and individuals should check

• The official English portal title uses “Know Your Client”; the 2026 executive regulation uses “Know Your Customer”. The package preserves the principal decree-law's official English title and records the terminology difference in research notes.
• Do not treat platform data access as unrestricted; client approval, user eligibility and codes of conduct are central.
• The 2026 executive regulation should be used for current operational details.
• Administrative penalties should be taken from Cabinet Resolution No. (56) of 2026, not guessed from the principal law.
• KYC processing must also be mapped against the Personal Data Protection Law and current AML/CFT requirements.
• Confirm the current version of the principal law and any implementing resolutions on the date the issue arises.
• Check whether a federal, local-Emirate or financial/free-zone rule changes the applicable regulatory perimeter.
• Keep the official source reference used for any compliance or procedural decision.

When legal advice may be useful

Professional interpretation may be useful where the applicable legal regime is disputed, a licensing or jurisdictional boundary is unclear, a transitional rule affects an existing right, a procedural deadline may expire, or a penalty/enforcement measure is possible.

Information status

Research checked on 2026-08-31. This page is general legal information and should be re-verified against the official UAE source before use in a transaction, proceeding or compliance decision.