CbC Filing Deadline UAE: Notification, Report and Penalties

Short answer: the CbC filing deadline UAE groups work to is really two deadlines. The CbC Notification is due no later than the last day of the reporting fiscal year; the CbC Report is due within twelve months after that year ends. Both go to the Ministry of Finance, and each carries its own penalty.

The CbC filing deadline UAE question sounds like it has a single answer, and that is exactly why groups get caught. Country-by-Country Reporting in the UAE does not run on one clock; it runs on two. There is a notification that is generally due by the last day of the reporting financial year, and there is the report itself, due within twelve months of the group’s year-end. The two are separate obligations with separate deadlines, separate failure modes and separate penalties.

A group can file a flawless CbC Report and still be exposed because nobody lodged the notification eleven months earlier. This guide walks through both deadlines, who actually falls inside the regime, where the report is filed, what the penalties cover, and why the whole exercise lives or dies on the quality of the underlying group data rather than on the submission itself.

What Country-by-Country Reporting is for

Country-by-Country Reporting is a transparency mechanism born out of the OECD’s base erosion and profit shifting work, and the UAE adopted it as part of aligning with international tax standards. In practice the regime is usually shortened to CbCR, and CbCR reporting obligations in the UAE sit with the Ministry of Finance rather than the FTA. The idea is simple even if the execution is not.

Large multinational groups file a single annual report that shows, for every tax jurisdiction they operate in, how much revenue they earn, how much profit they make, how much tax they pay and accrue, how many people they employ and what tangible assets they hold. Tax authorities across those jurisdictions can then see, at a glance, whether the group’s profits line up with its real economic activity or whether they have been shifted into low-tax jurisdictions where little actually happens.

For an in-scope group operating in the UAE, that means assembling a jurisdiction-by-jurisdiction picture of the entire multinational — not just the UAE slice — and lodging it through the correct government channel by the correct deadline. It sits alongside the group’s transfer pricing documentation as part of the same story: the CbC Report is the high-altitude view, the master file and local file are the detail underneath it. When those three documents disagree, a tax authority notices.

Who actually falls inside the regime

Country-by-Country Reporting is not a rule for every business, and it is not even a rule for every large business. It targets multinational enterprise groups — MNE groups — that operate across more than one jurisdiction and meet the consolidated group revenue threshold set for the regime. A large but purely domestic UAE company, with no operations outside the country, sits outside CbCR no matter how big its balance sheet is. The regime is about cross-border groups, and the threshold is measured at the level of the whole group’s consolidated revenue, not any single entity. The UAE CbCR revenue threshold is AED 3.15 billion of consolidated group revenue in the financial year preceding the reporting year — a group at or above that line is in scope; below it, CbCR does not apply.

The obligation attaches differently depending on where the group’s ultimate parent sits. Where the ultimate parent entity is tax-resident in the UAE and the group crosses the threshold, that UAE parent files both the notification and the CbC Report here.

Where the ultimate parent sits abroad, the report is filed in the parent’s jurisdiction and the UAE constituent entities of that group have nothing to file here — Cabinet Resolution No. 44 of 2020 removed the local notification and secondary-filing duties, so the UAE arm carries no separate obligation, even where the parent’s jurisdiction does not exchange reports with the UAE. The only entity that ever carries a UAE CbCR duty is a UAE-resident ultimate parent, and pinning down where the parent sits is the decision that resolves everything else.

Our guide on which groups must file a CbC Report in the UAE walks through the thresholds and structures in detail.

Getting the scoping right is the first real decision, and it is not always obvious from the org chart. Groups restructure, parents change residency, and thresholds are tested against a specific financial year’s figures. A group that was out of scope last year can be in scope this year on the back of an acquisition, and the notification for that year is due before most people have even closed the accounts. This is precisely the kind of assessment corporate tax services exist to run before a deadline turns into a penalty.

The CbC filing deadline UAE groups work to: two clocks, months apart

Here is the part that matters most, so it is worth stating plainly. The UAE CbCR regime runs on two deadlines, and they are months apart.

The CbC Notification

The notification is generally due by the last day of the group’s reporting financial year. For a group whose financial year ends on 31 December, that means the notification is due by 31 December of that same year — the year the numbers relate to, not the year after. The notification is the short administrative step that tells the Ministry of Finance the essentials: who the Reporting Entity is, which jurisdiction the group’s CbC Report will be filed in, and the identity of the UAE constituent entities. It carries no financial data of substance; it is a signposting exercise. And precisely because it is small and early, it is the one groups forget. A team focused on the twelve-month report deadline can sail straight past the notification that fell due while the reporting year was still running.

The CbC Report

The report itself is due within twelve months of the end of the group’s reporting financial year. For the same 31 December group, that pushes the report deadline out to 31 December of the following year. This is the substantive filing — the full jurisdiction-by-jurisdiction dataset covering revenues, profits, taxes, headcount and assets across the entire multinational group. Twelve months sounds generous, and on paper it is, but the data-gathering effort behind it is heavy enough that groups who treat the deadline as a distant problem routinely find themselves scrambling in the final quarter.

Where the report is filed — and why it is not the FTA

This is a small point that causes a disproportionate amount of trouble. Country-by-Country Reporting is filed through the UAE Ministry of Finance portal, not through the Federal Tax Authority’s systems. Every instinct a UAE finance team has points the other way, because corporate tax returns, VAT and most tax touchpoints run through the FTA. CbC is the exception. It is administered by the Ministry of Finance as part of the UAE’s international tax-transparency framework, and the notification and report both go there.

Filing in the wrong place is, for compliance purposes, the same as not filing. A CbC notification lodged in an FTA channel does not satisfy the Ministry of Finance obligation, and the deadline keeps running while the group believes it has complied. Before any submission, confirm you are in the correct MoF channel — this is one of the few compliance steps where the “where” is as error-prone as the “when.”

The penalties, and why there are three of them

Every UAE Country-by-Country Reporting penalty falls into one of three broad categories — the regime attaches administrative penalties to distinct failures, and understanding that they are separate is more useful than memorising any single figure. The amounts themselves are set out in Article 8 of Cabinet Resolution No. 44 of 2020, and they are large enough that the structure is worth reading carefully before the numbers.

Source for every row: Cabinet Resolution No. 44 of 2020 on Organising Reports Submitted by Multinational Companies, as published by the UAE Ministry of Finance. Two procedural points sit alongside the table and materially change how it plays out. Under Article 9(2) the Competent Authority must notify the entity in writing and grant “a grace period of fourteen (14) Business Days to remedy such violation” before applying a penalty. And under Article 9(3) liability does not arise where the entity satisfies the Authority that it had a reasonable excuse — though the Resolution expressly rules out insufficient funds as one. Penalty amounts are set by regulation and can be amended; confirm the live schedule before relying on it.

Failure to notify. Miss the notification deadline — the one that falls by the last day of the reporting year — and a penalty applies, even if the full report is later filed perfectly and on time. The notification is its own obligation, and its own failure.

Failure to file the report. Miss the twelve-month report deadline and a separate penalty applies. Filing the notification correctly does not cover you here; the report is the substantive filing and carries its own clock and its own exposure.

Inaccurate or incomplete reporting. File on time but submit a report that is wrong, inconsistent or missing data, and a third category of penalty comes into play. This is the one groups underestimate. Hitting the deadline is not the finish line if the numbers do not hold together — a report that contradicts the group’s own consolidated accounts or transfer pricing file is an accuracy problem, not a timing one.

The takeaway is that these three failures do not offset each other. A late notification is not cured by an on-time report. An on-time report is not cured by being accurate if it was filed after the deadline. Each is assessed on its own terms, which is why a group needs to hit all three targets — notify on time, file on time, file accurately — rather than treating CbC as a single pass-or-fail event.

“

The penalty schedule is the visible risk in Country-by-Country Reporting, but the quieter risk is a report that technically filed on time and still contradicts your own transfer pricing documentation. A tax authority reading both together will trust neither. Consistency across the CbC Report, the master file and the local file is worth more than any single deadline.

If a penalty lands, the Resolution gives you a route out

Most CbCR write-ups stop at the fine amounts. Cabinet Resolution No. 44 of 2020 spends two full articles on what happens after a penalty is assessed, and the clocks in them are as important as the figures — several of them cut in the taxpayer’s favour, and one of them cancels the penalty outright if the authority misses it.

Source: Cabinet Resolution No. 44 of 2020, as published by the UAE Ministry of Finance, read 5 August 2026.

Two of those rows are worth acting on rather than just noting. The fourteen business days in Article 9(2) are a genuine cure period — a group that gets a written notice and files inside that window should not be penalised at all, which makes the speed of your response to a Ministry letter more valuable than any argument you make later. And the deemed-success rule in Article 10(4) means an appeal is never a dead letter: diarise the sixtieth business day when you submit it.

One structural point that catches groups out. Article 8(3) caps total penalties for any one reporting fiscal year at AED 1,000,000, but the cap expressly excludes the daily additions under Article 8(1)(a)(ii) and Article 8(2)(ii). So the arithmetic on a badly missed year is not “AED 1,000,000 and no more” — it is the AED 1,000,000 cap, plus up to AED 250,000 of daily accruals on the report, plus up to AED 250,000 on the notification, because those two daily elements each carry their own separate AED 250,000 maximum and neither sits under the cap.

The real challenge is the data, not the deadline

Every experienced tax team will tell you the same thing: the portal submission is trivial, and the data behind it is where CbC filings actually break. The CbC Report demands accurate, jurisdiction-level figures from every constituent entity in the group — revenue split between related-party and unrelated-party transactions, profit before tax, income tax paid on a cash basis, income tax accrued, stated capital, accumulated earnings, number of employees, and tangible assets other than cash. That is a specific cut of the numbers that most subsidiaries have never been asked to produce, and pulling it together on a consistent basis is the whole job.

The friction shows up in predictable places. Subsidiaries in different jurisdictions close their books on different calendars, so aligning everyone to the group reporting period takes coordination. Entities report in different functional currencies, so the figures need translating on a consistent and defensible basis. Definitions that seem obvious — what counts as revenue, which taxes count as income taxes, how a permanent establishment is treated — turn out to need careful, uniform application across the group so that jurisdiction A and jurisdiction B are measured the same way. And the CbC numbers cannot float free of everything else; they have to reconcile back to the consolidated financial statements and sit consistently alongside the transfer pricing master file and local file.

A group that recognises all this early builds a CbC data pack the same way it builds a consolidation: a defined template, a clear owner in every entity, a fixed timetable that works backward from the deadline, and a reconciliation step that ties the CbC figures to the audited group accounts. A group that leaves it to the final month is the one that discovers a foreign subsidiary’s controller is on leave, the currency translation basis was never agreed, and the headcount definition three entities used does not match the other five. The deadline does not move to accommodate any of that.

A practical timeline that works backward from the deadline

The cleanest way to run CbC compliance is to stop thinking of it as a year-end filing and start thinking of it as a project that begins early in the reporting year. The logic is straightforward once the two deadlines are on the calendar.

Early in the reporting year, confirm scope. Test the group against the consolidated-revenue threshold for that year, identify the ultimate parent’s residency, and settle who the Reporting Entity is and which UAE constituent entities exist. This is the assessment that determines whether the notification is even due, and it needs to be done while there is still time to act on it.

By the last day of the reporting year, lodge the notification with the Ministry of Finance. If scope was confirmed early, this is a short, clean step rather than a panic. Miss it and no amount of good work on the report later will undo the failure-to-notify exposure.

Through the following months, build the data pack. Circulate the CbC template to every constituent entity, agree the currency translation and definitional bases up front, collect the jurisdiction-level figures, and reconcile them to the consolidated accounts and the transfer pricing documentation. This is the heavy lifting, and giving it several months rather than several weeks is the single biggest determinant of whether the final report is accurate.

Within twelve months of the year-end, file the CbC Report through the correct Ministry of Finance channel. Because the data was assembled and reconciled ahead of time, the submission itself becomes the formality it should always have been.

Run it this way and CbC stops being a fire drill. The two deadlines are known, the data is ready before it is needed, and the report agrees with everything else the group has filed. That is the whole aim: not just hitting the CbC filing deadline UAE dates, but filing something that stands up when a tax authority reads it against the group’s other documentation.

How CbC connects to the wider tax picture

Country-by-Country Reporting does not sit in isolation. It is the top layer of a group’s transfer pricing story, and it has to be consistent with the layers beneath it. The master file describes the group’s global business, its intangibles and its financing. The local file documents the UAE entity’s specific related-party transactions. The CbC Report gives the jurisdiction-level financial map. A tax authority reviewing a group reads these together, and inconsistency between them is a red flag that invites exactly the kind of scrutiny CbC compliance is meant to avoid.

That is why the reconciliation step matters so much, and why CbC belongs inside the group’s broader corporate tax and transfer pricing governance rather than being treated as a standalone form. The same discipline that produces clean, defensible corporate tax services filings — accurate underlying data, consistent definitions, a clear audit trail — is the discipline that produces a clean CbC Report. Groups that already run tight transfer pricing documentation tend to find CbC far less painful, because the hard data work is largely already done and the CbC Report becomes a summary of a story they have already told coherently elsewhere.

Where this leaves your group

The CbC filing deadline UAE picture comes down to a handful of things done in the right order. Confirm whether the group is in scope, and do it early enough to act. Lodge the notification by the last day of the reporting year — the deadline everyone forgets. Build the jurisdiction-level data pack with months to spare, and reconcile it to the consolidated accounts and the transfer pricing file. File the report within twelve months, through the Ministry of Finance and not the FTA. Get those in the right sequence and the penalties for failure to notify, failure to file and inaccurate reporting never come into play. Treat CbC as a twelfth-month form and at least one of those three will.

If any part of the scoping is still open, three companion guides cover the questions this page deliberately does not re-litigate: CbC notification vs CbC report in the UAE explains what each filing actually contains, the UAE country-by-country reporting threshold works through the AED 3.15 billion test in detail, and BEPS explained for UAE groups covers the international framework CbCR came out of. On the documentation side, our transfer pricing service covers the master file and local file that the CbC Report has to agree with.

Velmont Crest helps in-scope UAE groups run this end to end — scoping the obligation, diarising both deadlines, building the CbC data pack, reconciling it to the group accounts and transfer pricing documentation, and preparing the notification and report for filing through the correct Ministry of Finance channel. Read more on our CbC reporting service or pair it with our wider corporate tax services so the whole transfer pricing story holds together. Explore our insights hub for more UAE compliance guidance, or get in touch via our contact page.

Disclaimer: Velmont Crest is a DED-licensed accounting firm providing advisory, preparation and compliance support services. We are not a law firm, the Federal Tax Authority, an FTA-registered tax agent representing clients before the authorities, or a licensed financial-services provider. UAE Country-by-Country Reporting rules — including scope thresholds, deadlines and penalty amounts — are set by regulation and change over time; verify all current requirements against the live Ministry of Finance guidance and consult a qualified professional for advice specific to your group before acting.

References

• UAE Ministry of Finance — Country-by-Country Reporting
• UAE Ministry of Finance — Corporate Tax in the UAE
• OECD — Country-by-Country Reporting (BEPS Action 13)
• UAE Government Portal — Taxation