Article (9)
Publication and Entry into Force
This Resolution shall be published in the Official Gazette and shall enter into force on the day
following the date of its publication.
Mohammed bin Rashid Al Maktoum
Prime Minister
Issued by Us:
On: 2 Dhu al-Qi'dah 1447 A.H.
Corresponding to: 20 April 2026 A.D.
-- 4 of 8 --
Cabinet Resolution of 2026 Regarding the Schedule of Violations and Administrative Sanctions for Acts
Committed in Contravention of the Provisions of Federal Decree-Law of 2024 Regarding the "Know Your
Customer" Digital Platform and Its Executive Regulations
5
Schedule Annexed to Cabinet Resolution No. (56) of 2026 Regarding the Regulations
of Administrative Violations and Sanctions for Acts Committed in Violation of the
Provisions of Federal Decree-Law No. (30) of 2024 Regarding the "Know Your
Customer" Digital Platform and Its Executive Regulations
SN. Description of Violation Administrative
Fine (AED)
1. The Company's disclosure or revelation of any "Know Your
Customer" Data in its possession to third parties in contravention
of the provisions of the Decree-Law or its Executive Regulations.
(50,000)
2. The Company's failure, upon issuing a report, to comply with the
controls referred to in Articles (4) and (5) of the Executive
Regulations of the Decree-Law.
(50,000)
3. The Company's failure to establish and manage the "Know Your
Customer" Platform in accordance with the requirements of the
Decree-Law, its Executive Regulations, and the controls issued by
the Central Bank in this regard.
(50,000)
4. The Company's failure to notify the Central Bank of any violations
of the provisions of the Decree-Law, its Executive Regulations, the
controls, Codes of Conduct, resolutions, and instructions issued by
the Central Bank that come to its knowledge.
(50,000)
5. The Company's unjustified refusal to provide a User with a "Know
Your Customer" Report.
(50,000)
6. The Company's issuance of a "Know Your Customer" Report
without verifying the consent of the Customer, the Customer’s
heirs, legal representative, or duly authorized agent, or in violation
of the agreement concluded between the Company and Data
Providers.
(100,000)
7. The Company's issuance of a "Know Your Customer" Report that
does not correspond to the "Know Your Customer" Data received
from the Data Provider.
(50,000)
-- 5 of 8 --
Cabinet Resolution of 2026 Regarding the Schedule of Violations and Administrative Sanctions for Acts
Committed in Contravention of the Provisions of Federal Decree-Law of 2024 Regarding the "Know Your
Customer" Digital Platform and Its Executive Regulations
6
8. The Company's failure, without legal justification, to take the
necessary measures to update a "Know Your Customer" Report in
accordance with amendment or correction notices received from
the Data Provider or the Customer.
(50,000)
9. The Company's violation of the controls and specifications
prescribed under the Executive Regulations of the Decree-Law
concerning systems for processing, protecting, and issuing "Know
Your Customer" Data and Reports.
(50,000)
10. The Company's failure to protect "Know Your Customer" Data
transmitted through the Platform against loss, damage,
unauthorized or insecure access, use, or modification.
(50,000)
11. The Company's use, circulation, or exchange of "Know Your
Customer" Data for purposes other than those provided for in the
Decree-Law and its Executive Regulations.
(100,000)
12. The Company's failure to link the "Know Your Customer"
Database with the Central Bank.
(100,000)
13. The Company's failure to take the necessary measures to establish
the electronic link between the Platform and each User and Data
Provider in accordance with the provisions of the Executive
Regulations of the Decree-Law and the controls established by the
Central Bank.
(50,000)
14. The Company's failure to conduct a periodic assessment of the
quality and accuracy of the "Know Your Customer" Report and to
submit the results thereof to the Central Bank.
(50,000)
15. The Company's failure, without justification, to verify the identity
and legal capacity of the applicant for and recipient of the "Know
Your Customer" Report and their entitlement to obtain the Report
in accordance with the provisions of the Decree-Law and its
Executive Regulations.
(50,000)
-- 6 of 8 --
Cabinet Resolution of 2026 Regarding the Schedule of Violations and Administrative Sanctions for Acts
Committed in Contravention of the Provisions of Federal Decree-Law of 2024 Regarding the "Know Your
Customer" Digital Platform and Its Executive Regulations
7
16. The Data Provider's submission of inaccurate "Know Your
Customer" Data to the Company without verifying their source,
accuracy, and up-to-datedness prior to its submission to the
Company.
(50,000)
17. The Data Provider's refusal to undertake the necessary corrective
measures in respect of the available information and data
immediately upon being notified by the Company of a request to
amend or update the Report.
(50,000)
18. Violation by the Data Provider, User, or the Company of any of the
provisions set out in the Codes of Conduct and controls issued by
the Central Bank.
Not less than
(10,000) and
not exceeding
(100,000)
19. The Data Provider's refusal to provide the Company with the
"Know Your Customer" Data requested thereby in accordance
with the agreement concluded between them.
(100,000)
20. The Data Provider's failure to implement a secure and effective
system for the transfer of "Know Your Customer" Data to the
Company.
(50,000)
21. The Data Provider's failure to comply with the mechanism for
submitting, examining, and processing data-related complaints
set out in Article (15) of the Executive Regulations of the Decree-
Law.
(50,000)
22. The User's transfer of a "Know Your Customer" Report or any data
contained therein outside the State, or sharing the contents of the
Report or the data with any entity outside the State.
(100,000)
23. The User’s utilization of a "Know Your Customer" Report or any
data contained therein for purposes other than those specified in
the request submitted thereby to obtain the report, or in violation
of the Decree-Law, its Executive Regulations, or the Codes of
Conduct issued by the Central Bank.
(100,000)
-- 7 of 8 --
Cabinet Resolution of 2026 Regarding the Schedule of Violations and Administrative Sanctions for Acts
Committed in Contravention of the Provisions of Federal Decree-Law of 2024 Regarding the "Know Your
Customer" Digital Platform and Its Executive Regulations
8
24. The User's failure to maintain the confidentiality of the data
contained in a "Know Your Customer" Report, or to exchange,
disclose, reveal, or use thereof in violation of the provisions of the
Decree-Law, its Executive Regulations, and the Codes of Conduct,
and controls issued by the Central Bank.
(100,000)
25. The User's failure to retain copies of all "Know Your Customer"
Reports issued thereto by the Company for a period of not less
than five (5) years from the date of issuance of the Report.
(50,000)
26. The User's failure to dispose of a "Know Your Customer" Report or
any data contained therein in accordance with Paragraph (e) of
Clause (2) of Article (13) of the Executive Regulations.
(50,000)
27. The User's failure to provide copies of the "Know Your Customer"
Reports issued thereto by the Company upon request by the
competent authorities.
(50,000)
28. The User's failure to immediately notify the Company, the
competent authorities, and the Customer of any instances of
unlawful use of the data obtained by the User.
(50,000)
29. The User's failure to inform the Customer of the purpose for which
the "Know Your Customer" Report is obtained.
(50,000)
30. The User's refusal to undergo any audit or review conducted by
the Company to ensure compliance with the obligations set out in
the Decree-Law, this Resolution, and the Codes of Conduct, and
controls issued by the Central Bank.
(50,000)
31. The User's failure to comply with the legislation in force in the
State governing the protection of personal data.
(50,000)
-- 8 of 8 --
