DIFC
DIFC Ongoing Compliance & Annual Filing Obligations
· 7 min read · By Aureus Worldwide
Incorporating a DIFC entity is the start of a continuing set of duties, not the finish line. Once your company is live, a rhythm of DIFC ongoing compliance and annual filing obligations begins, confirmation filings, audited accounts, registered-office upkeep, beneficial-ownership records, data protection notifications and UAE tax duties. Miss them and you risk fines, blocked renewals and, in the worst case, being struck off. This guide sets out what a DIFC company must do to stay in good standing, organised as a practical compliance calendar.
Who oversees DIFC compliance
Responsibility for DIFC compliance is split across bodies, and knowing which one owns which obligation is the first step to staying on top of them:
- The DIFC Registrar of Companies (RoC) handles corporate filings, confirmations, accounts, changes to directors, shareholders and address.
- The Commissioner of Data Protection administers the DIFC Data Protection Law 2020 and its notifications.
- The Dubai Financial Services Authority (DFSA) imposes additional prudential and conduct reporting on authorised financial-services firms; most non-financial entities are not DFSA-authorised.
- The UAE Federal Tax Authority (FTA) administers Corporate Tax and VAT, which apply across the UAE including the DIFC.
For the regulatory layer specific to DFSA-authorised firms, see our DIFC regulatory and reporting requirements guide. The obligations below focus on the corporate and tax duties that apply to DIFC entities generally.
The core annual obligations
Most DIFC entities share a common set of recurring duties, regardless of whether they are trading, holding or advisory in nature.
1. Annual confirmation and registered particulars
DIFC companies must confirm their key details to the RoC each year, directors, shareholders or members, registered office and share capital, and keep those particulars accurate throughout the year. Any change (a new director, a share transfer, a change of address or name) must be filed promptly, not just at year-end. Maintaining a valid registered office is part of this; if you are reviewing your address arrangement, see DIFC registered office and premises options.
2. Accounting records and financial statements
Every DIFC entity must keep proper accounting records that explain its transactions and financial position. Most must then prepare financial statements and have them audited by an auditor recognised for DIFC work, filing them within a set period after the financial year-end. Good bookkeeping through the year is what makes the year-end audit painless, our accounting services for the DIFC are built around this.
3. Beneficial ownership (UBO) records
In line with the UAE's beneficial-ownership framework, DIFC entities must identify their ultimate beneficial owners, maintain a UBO register and keep it updated as ownership changes. This sits alongside registers of members and directors.
4. Data protection notification
If your entity processes personal data, employee or customer records, for example, it is subject to the DIFC Data Protection Law 2020 and generally files an annual notification with the Commissioner of Data Protection and pays the associated fee. Processing without the required registration is itself a breach.
5. Commercial licence renewal
Your DIFC commercial licence is renewed annually, and renewal is typically contingent on your other filings and fees being up to date. A lapsed licence can freeze your ability to transact and bank.
Tax obligations: Corporate Tax and VAT
The UAE tax regime applies to DIFC entities, and these duties run in parallel with your corporate filings:
- UAE Corporate Tax. DIFC companies fall within the Corporate Tax regime introduced by Federal Decree-Law No. 47 of 2022. The headline rate is 9% on taxable income above AED 375,000 and 0% below. A DIFC entity meeting the conditions to be a Qualifying Free Zone Person (QFZP) can access a 0% rate on qualifying income, with 9% on the rest, but registration with the FTA and annual return filing apply regardless of the rate you ultimately pay. Our corporate tax service helps you register, assess QFZP status and file.
- VAT. The standard 5% VAT applies across the UAE. If your taxable supplies cross the registration threshold, you must register, charge VAT where applicable, and file periodic returns.
Because tax registration and return deadlines are separate from your RoC filings, they need their own place in the compliance calendar.
A DIFC compliance calendar at a glance
| Obligation | Frequency | Owner |
|---|---|---|
| Annual confirmation / particulars | Annual + on change | RoC |
| Audited financial statements | Annual (after year-end) | RoC / auditor |
| UBO register upkeep | Ongoing + on change | RoC framework |
| Data protection notification | Annual (if processing data) | Commissioner of Data Protection |
| Commercial licence renewal | Annual | DIFC |
| Corporate Tax registration & return | Registration once; return annual | FTA |
| VAT registration & returns | Return periodic (if registered) | FTA |
| DFSA prudential / conduct returns | Periodic (authorised firms only) | DFSA |
Use this as a skeleton and add your specific year-end and deadline dates. Where a filing has both a preparation lead time (such as the audit) and a hard deadline, work back from the deadline so nothing is left to the last week.
Additional obligations that may apply
Depending on your activities, you may also need to address:
- Economic Substance Regulations (ESR). Entities carrying on certain relevant activities at the UAE federal level may have substance and reporting obligations. Our ESR reporting service can assess whether these apply.
- DFSA reporting. Authorised financial-services firms file prudential returns and notifications on top of everything above, covered in DIFC regulatory and reporting requirements.
- Employment and WPS-equivalent duties. If you sponsor staff, payroll and employee-related obligations follow.
Event-driven filings: not everything waits for year-end
A common misconception is that DIFC compliance is an annual exercise. In reality, a large share of filings are event-driven, triggered when something changes, and usually due within a set period of the change rather than at year-end. Keep an eye on:
- Changes to officers and ownership, appointing or removing a director, a share transfer, or a change in members must be filed with the RoC promptly.
- Registered office or name changes, both require their own filing and updates across your registrations and bank records.
- Amendments to the constitution, changes to your articles or equivalent document are notified to the Registrar.
- Beneficial ownership changes, the UBO register must be updated when ultimate ownership shifts, not only reviewed annually.
- Tax status changes, crossing a VAT threshold or a change affecting your Corporate Tax position can create new registration or notification duties.
The discipline here is to treat every corporate change as a potential filing and to log it immediately, so a routine board decision does not become an overdue notification weeks later.
The cost of getting it wrong
DIFC compliance is not optional housekeeping. Late or missed filings can lead to fines that escalate over time, refusal of licence renewal, and in serious cases the entity being struck off the register. Non-compliance also creates friction with banks, which increasingly scrutinise good standing before maintaining accounts. The practical defence is simple: keep clean books through the year, maintain a live compliance calendar, and treat deadlines as fixed.
How Aureus Worldwide can help
Aureus Worldwide is a Dubai-based accounting, bookkeeping, tax, CFO-outsourcing and compliance-advisory firm, and ongoing compliance is exactly where we add day-to-day value. We keep your bookkeeping current and audit-ready, prepare your financial statements and coordinate with your appointed auditor, handle your Corporate Tax and VAT registration and returns, maintain your compliance calendar so filings are never missed, and provide outsourced CFO oversight as you scale.
We are not a DIFC-registered auditor and do not sign audit reports, we prepare your books to an audit-ready standard and work with your appointed auditor, and we are neither a DFSA-authorised firm nor a law firm. What we do is make sure your filings, deadlines and numbers stay in order. See our accounting, tax and CFO services, or read DIFC company formation cost and timeline to plan the recurring costs of staying compliant.
Frequently asked questions
What are the main annual filings for a DIFC company?
Most DIFC entities must file an annual confirmation of their details with the Registrar of Companies, maintain a registered office, keep proper accounting records and file financial statements, audited in most cases. Data protection notifications, UBO updates and licence renewal also recur annually.
Do DIFC companies have to file audited accounts?
Most DIFC entities are required to prepare and file audited financial statements within a set period after their financial year-end. The audit must be carried out by an auditor recognised for DIFC work; certain smaller or specific structures may have lighter requirements, so confirm your position.
What happens if a DIFC company misses a filing deadline?
Late or missed filings can trigger fines, escalating penalties and, in serious cases, the risk of the entity being struck off. Non-compliance also complicates banking and renewals, so a compliance calendar and timely bookkeeping are essential.
Do DIFC companies need to register for UAE Corporate Tax?
DIFC entities fall within the UAE Corporate Tax regime and generally must register with the FTA and file returns, even if they qualify for the 0% rate as a Qualifying Free Zone Person on qualifying income. Registration and filing obligations apply regardless of the rate.