Who Must File a CbC Report in the UAE — Groups, Thresholds and Notifications

Country-by-Country reporting is one of those UAE compliance topics that generates far more anxiety than it should — and, in a small number of genuinely large groups, far less attention than it deserves. The phrase “who must file a CbC report in the UAE” gets typed into search boxes by finance managers at businesses that will never come close to the obligation, and occasionally missed entirely by the one subsidiary inside a billion-dirham structure that actually needs to act. The confusion is understandable. The rules use words like “multinational,” “group” and “reporting” that sound like they could apply to almost any company with an overseas customer or a foreign shareholder. They don’t. CbCR is a deliberately narrow, large-group regime with a hard financial threshold, and once you understand the two tests that gate it, the whole thing becomes a short, answerable question. This guide walks through exactly which groups must file, who inside the group actually carries the obligation, and where the far more common notification-only duty sits.

What CbC reporting is actually for

Country-by-Country reporting came out of the OECD’s work on base erosion and profit shifting — the concern that large multinationals could book profit in low-tax jurisdictions while carrying out the real economic activity somewhere else. The CbC report is the tool tax authorities use to see, at a glance, where a group earns its money and where it pays its tax. It is not an assessment, and it does not calculate anything owed. It is a risk-assessment map: revenue, profit, tax paid and accrued, employee headcount, capital and tangible assets, broken down jurisdiction by jurisdiction, for the whole group in a single return.

The UAE adopted this framework in line with the OECD standard, which is why the numbers and definitions will look familiar to anyone who has dealt with CbCR in another jurisdiction. The core design principle is that the report is filed once, for the entire group, by the entity best placed to see the whole picture — the Ultimate Parent Entity — and then shared between tax authorities through automatic exchange agreements. That “filed once, exchanged widely” design is the key to understanding why most UAE entities inside a multinational group do not file a full report themselves.

Get the scoping question right and CbCR is a manageable, once-a-year exercise for the handful of groups it touches. Get it wrong in either direction — over-scoping a mid-sized business into needless work, or under-scoping a large group past a deadline — and it becomes a problem out of proportion to the effort the correct answer would have taken.

The two tests that decide everything

Whether a group is in scope for UAE CbCR comes down to two questions, applied in order. Both have to be answered “yes” before the obligation exists. Miss either and the group is out.

Test one — is it a Multinational Enterprise Group?

The first test is the multinational test. An MNE Group is a collection of enterprises, connected through ownership or control, that is required to prepare consolidated financial statements, and which has constituent entities resident or operating in two or more jurisdictions. The operative words are “two or more jurisdictions.” A group that operates entirely within the UAE — every entity resident here, every activity carried out here — is simply not multinational, and CbCR does not apply to it no matter how large it grows domestically.

This is the point where a great many UAE businesses can stop reading. A single-country group, even a substantial one, has no CbC obligation. Cross-border customers, foreign suppliers or an overseas individual shareholder do not by themselves make a group multinational — what matters is whether the group has constituent entities that are resident or operating in another jurisdiction and are consolidated into the group accounts.

Test two — is consolidated revenue AED 3.15 billion or more?

The second test is the size test. Even a genuine MNE Group only enters CbCR scope if its total consolidated group revenue for the immediately preceding financial year was AED 3.15 billion or more. This dirham figure corresponds to the OECD’s EUR 750 million reference threshold. Below it, the group is out of scope.

The word that carries the weight here is “consolidated.” The threshold is measured against the group’s worldwide consolidated revenue — the top-line figure in the consolidated financial statements — not the revenue of the UAE entity in isolation. This is the single most misunderstood element of the whole regime, and it cuts both ways. A UAE company booking modest local revenue can sit inside a global group that clears AED 3.15 billion several times over, in which case the group is in scope. Equally, a UAE holding company that looks impressively large on a domestic view can fall comfortably below the line once its true consolidated global position is calculated.

Who inside a qualifying group actually files

Passing both tests puts the group in scope. It does not automatically make your particular UAE entity the filer. The obligation to lodge the full CbC report belongs to a specific entity, and identifying it correctly is what separates a full reporting duty from a lighter notification duty.

The default filer is the Ultimate Parent Entity (UPE) — the top entity in the group that consolidates the others and is not itself consolidated by any parent above it. The UPE files the CbC report in its jurisdiction of tax residence. So the clean, common cases are these:

• If the group is in scope and the Ultimate Parent Entity is UAE-resident, the full CbC report is filed here, by that UAE parent. This is the classic “UAE headquartered multinational” case.
• If the group is in scope but the Ultimate Parent sits in another country and files the report there, the UAE constituent entities in the group generally do not file a second full report in the UAE. Instead they typically owe a notification.

There is a middle path. Where the Ultimate Parent cannot or does not file — for example because its home jurisdiction has no CbCR framework or no exchange arrangement with the UAE — a group may appoint a surrogate parent entity to file on the group’s behalf. If that surrogate is UAE-resident, the UAE filing obligation attaches to it. Surrogate filing is the exception, not the norm, but it explains why “the report is always filed abroad if the parent is abroad” is not a safe assumption.

The notification duty most UAE entities actually have

Here is the distinction that resolves most of the confusion we hear. A CbC report and a CbC notification are two different things, with two very different levels of effort.

The report is the full jurisdictional data return — revenue, profit, tax, people and assets, country by country, plus an entity-by-entity listing of the group. It is a real compliance project, drawing data from across the whole group. The notification, by contrast, is a short administrative filing. It tells the UAE authority which entity is the group’s Ultimate Parent or surrogate filer, and in which jurisdiction the full report will be lodged. That is essentially its whole job.

For most UAE entities that are constituent members of a large foreign-parented group, the notification — not the report — is the obligation that applies. The parent files the report abroad; the UAE subsidiary tells the UAE authority where to expect it. Treating these as interchangeable is where deadlines quietly go wrong: a finance team concludes “the parent files, so we have nothing to do” and overlooks a notification that was theirs all along, or the reverse — a team panics about assembling a full report when a one-page notification was all that was ever required.

This is exactly the kind of scoping call we help clients get right through our CbC reporting support — establishing, for each UAE entity in a multinational structure, whether it faces a full report, a notification, or nothing, before any deadline is in play.

“

Most UAE entities inside a large multinational owe a notification, not a report. The expensive mistakes cluster at that boundary — teams assembling a full CbC report they never needed, or missing a one-page notification they always did. Settle which side of the line you are on first, and the workload sorts itself out.

Worked through: three groups, three answers

The regime is easier to hold onto through examples. Take three UAE businesses.

A domestic-only trading group. Several UAE entities, consolidated accounts, AED 900 million consolidated revenue, no entity resident or operating outside the UAE. It fails the multinational test at the first hurdle — one jurisdiction only. No CbC report, no notification. Out of scope entirely. Its size is irrelevant because it never becomes an MNE Group.

A UAE subsidiary of a foreign multinational. The UAE company books AED 40 million locally, but it belongs to a global group whose consolidated revenue is well above AED 3.15 billion, with the Ultimate Parent resident overseas and filing the CbC report there. The group is in scope. The UAE subsidiary does not file a full report here — but it very likely owes a UAE notification identifying the parent and the filing jurisdiction. Small locally, in scope globally, notification duty.

A UAE-headquartered multinational. The Ultimate Parent is UAE-resident, the group operates across several countries, and consolidated revenue exceeds AED 3.15 billion. This is the full-obligation case: the UAE parent files the complete CbC report here. Both tests passed, UPE in the UAE, full report due.

Three businesses, three clean outcomes — nothing, notification, report — and in every case the answer fell straight out of the same two questions: is it multinational, and is consolidated revenue at or above AED 3.15 billion, followed by where the Ultimate Parent sits.

How CbCR sits alongside transfer pricing

CbCR does not live on its own. It sits inside the broader UAE corporate tax and transfer pricing landscape, and it is worth being precise about how the pieces relate, because they are frequently muddled.

Country-by-Country reporting and transfer pricing documentation tell overlapping stories at different resolutions. The CbC report is the wide-angle view — a group-level map of where profit and tax land across jurisdictions, used by authorities for risk assessment. Transfer pricing documentation, the master file and local file, is the close-up: it explains and justifies the pricing of transactions between related entities in detail. A large in-scope group can owe both, and the two should be internally consistent — the profit story a group tells in its CbC report should not contradict the one it tells in its transfer pricing files.

The crucial difference is reach. CbCR is threshold-gated at AED 3.15 billion of consolidated revenue, so it only ever touches large groups. Transfer pricing rules under the UAE corporate tax regime apply far more broadly, catching many businesses with related-party and connected-person dealings at much lower thresholds. That means a mid-sized UAE business can have real transfer pricing obligations while being nowhere near CbC reporting scope. The two are connected, but they are not the same test, and being out of scope for one says nothing about the other.

The practical scoping routine

For any UAE business that suspects it might have a CbCR obligation, the assessment is short and repeatable. Run it once a year, early, before any deadline is close.

Start with the multinational test. Does the group consolidate entities that are resident or operating in two or more jurisdictions? If the answer is no — a single-country group — stop. There is no CbC obligation, and there won’t be until the group crosses a border.

If the group is multinational, move to the size test. What was the group’s total consolidated revenue in the immediately preceding financial year? Pull the figure from the consolidated financial statements, not the UAE entity’s standalone accounts. If it is below AED 3.15 billion, the group is under the threshold and out of scope. If it is at or above, the group is in scope and you continue.

For an in-scope group, locate the Ultimate Parent Entity and its jurisdiction of tax residence. If the UPE is UAE-resident, a full CbC report is due here. If the UPE is resident abroad and files there, identify which UAE constituent entities owe a notification, and diarise that notification deadline separately — it is easy to lose because it feels administrative rather than substantive. Where the parent cannot file in its home jurisdiction, check whether a surrogate filing arrangement applies and whether that surrogate is UAE-resident.

Two lines of enquiry, one lookup of where the parent sits, and the obligation resolves into exactly one of three outcomes. The groups that get caught out are never the ones that ran this routine; they are the ones that assumed the answer without checking the consolidated number or the parent’s residence.

Where this leaves your group

The honest headline on “who must file a CbC report in the UAE” is that most businesses reading the question don’t — and a small number who should be reading it more carefully do. CbCR is a large-group regime, gated behind a multinational test and an AED 3.15 billion consolidated-revenue threshold, with the full report falling on a UAE-resident Ultimate Parent or surrogate. Purely domestic UAE groups are out on the first test. Cross-border groups below the threshold are out on the second. And a large slice of UAE entities inside qualifying foreign groups owe a notification rather than a report — a distinction worth getting right, because the effort and the risk of missing it differ enormously.

The right move is not to guess. Establish, each year, whether the group is multinational and whether consolidated revenue clears AED 3.15 billion, then confirm where the Ultimate Parent sits. Those three facts answer the whole question. Pair a clean CbCR assessment with disciplined transfer pricing documentation so the group’s profit story is consistent across both, and the compliance picture holds together rather than surfacing surprises at deadline.

Velmont Crest is a DED-licensed UAE accounting firm providing advisory and preparation support on corporate tax, transfer pricing and Country-by-Country reporting scope for mainland and free zone businesses. If you are unsure which side of the CbCR line your group sits on, we can help you run the assessment and prepare what is genuinely required — read more on our insights hub or get in touch via our contact page.

Disclaimer: Velmont Crest is a DED-licensed accounting firm providing advisory, preparation and compliance support services. We are not a law firm, the Federal Tax Authority, an FTA-registered tax agent, or a licensed financial-services provider, and this article is general information rather than advice for your specific circumstances. UAE Country-by-Country reporting rules, thresholds and deadlines are set and updated by the UAE Ministry of Finance and Federal Tax Authority — verify the current requirements against the official framework and consult a qualified professional before acting.

References

• UAE Ministry of Finance — Country-by-Country Reporting
• UAE Federal Tax Authority
• OECD — Country-by-Country Reporting (BEPS Action 13)
• UAE Government portal — Corporate Tax