On 28 February 2026, the UAE's General Civil Aviation Authority suspended every drone, light sport aircraft and specialised operation authorisation across the country's airspace with immediate effect. The order, Safety Decision 2026-03, was reissued in a broader Issue 02 on 27 March 2026 to add balloon and Part-SPO operations to the suspension. Normal air navigation resumed on 2 May 2026, but the GCAA's statement did not separately confirm that UAS approvals were reinstated, leaving drone operators to verify their status directly with the authority rather than assume the reopening covered them. That gap between "airspace reopened" and "your authorisation is valid again" is exactly the kind of regulatory nuance that catches airlines, MRO shops and drone operators off guard across the region.
The Middle East is not one aviation regime, it is four: Saudi Arabia's General Authority of Civil Aviation (GACA), the UAE's General Civil Aviation Authority (GCAA), Qatar's Civil Aviation Authority (QCAA) and Israel's Civil Aviation Authority (CAAI). Each sits on the same ICAO Chicago Convention foundation, each has bilateral airworthiness arrangements with the FAA or EASA, and each is amending its rulebook this year to catch up with drones, advanced air mobility and CORSIA. None of them publish a single harmonized GCC rulebook the way EASA does for the EU 27, so a compliance calendar built for one jurisdiction rarely transfers cleanly to the next.
Which regulators actually drive aviation compliance in the Middle East?
Four national authorities set the enforceable rules, and each borrows a different foreign design code as its technical backbone. GACA has adopted the airworthiness design codes of the United States for large aeroplanes, helicopters and engines under 14 CFR Parts 23, 25, 27, 29 and 33, and does not issue its own type certificates: it renders FAA-issued type certificates valid instead, as confirmed in Saudi Arabia's ICAO differences filing (AIP GEN 1.7). The GCAA operates under Federal Decree-Law No. 26 of 2022 for drones and its own Civil Aviation Regulations (CARs) for manned aviation, established under Federal Law No. 4 of 1996. Qatar's QCAA runs QCAR 1002/2006, most recently amended by QCAR 096 of 2022, which sets airworthiness and environmental certification requirements and validates certificates issued by other ICAO contracting states. Israel's CAAI operates under the Aviation Law of 2011 and maintains bilateral working arrangements with the FAA, the UK CAA and, historically, EASA for design and production oversight.
A 2020 academic analysis of ICAO's Universal Safety Oversight Audit Programme found the UAE posting the highest average Effective Implementation score in the Persian Gulf region at 99.31%, with Qatar second and Saudi Arabia close behind at 89.58%. Scores shift with every audit cycle, and ICAO's new Safety Management Protocol Questions become applicable to all USOAP Continuous Monitoring Approach activities after 1 August 2026, so a snapshot from one year does not guarantee the next audit result.
How is drone and advanced air mobility regulation changing across the region in 2026?
Fast, and unevenly. The GCAA's Federal Decree-Law No. 26 of 2022 already requires UA pilot licensing, mandatory drone registration and prior Airspace Approval for most operations, administered through the My Drone Hub application under CAR-UAEV. Qatar is on a slower but firmer timeline: QCAR 096 of 2022 introduces dedicated technical requirements for remotely piloted aeroplanes, remotely piloted helicopters, remote pilot stations and C2 links, with a fixed entry-into-force date of 26 November 2026. Saudi Arabia has taken the advanced air mobility route instead of a pure drone rulebook, signing an agreement with Archer Aviation on 8 December 2025 and a separate deployment agreement with Joby Aviation, both aimed at harmonizing eVTOL type certification with the FAA rather than building a Saudi-specific certification basis. GACA's own AAM Roadmap, developed alongside NEOM's unmanned traffic management concept, targets Riyadh, Jeddah and Red Sea Global for early eVTOL route testing.
The operational risk is that these frameworks move independently. An operator with regional UAS approvals cannot assume that a Qatar drone certificate satisfies UAE requirements, or that GCAA's 2026 suspension pattern (two safety decisions inside one month) reflects a stable baseline rather than a security-driven exception. Tracking each authority's Safety Decisions, Civil Aviation Regulations amendments and advisory circulars individually, in near real time, is now a distinct compliance function in its own right, precisely the kind of per-jurisdiction monitoring Obsidian's regulatory monitoring platform is built to automate.
What does CORSIA's mandatory phase mean for Middle East carriers starting in 2027?
From 2027, participation in ICAO's Carbon Offsetting and Reduction Scheme for International Aviation stops being voluntary for states above the 0.5% international RTK threshold, which includes Saudi Arabia, the UAE and Qatar. Coverage jumps from roughly 120 voluntarily-participating states in the 2024-2026 first phase to close to all ICAO member states except Least Developed Countries, Small Island Developing States and Landlocked Developing Countries. Gulf carriers run some of the highest long-haul, cross-border route densities in the world, which means their offsetting exposure scales disproportionately once the scheme goes mandatory. The compliance timeline compounds the risk: airlines receive their final Phase 1 offsetting obligations in November 2027 and must retire the required emissions units by 31 January 2028, a two-month window against a market where CORSIA-eligible credit supply is already constrained by limited multi-country project approvals.
Saudi Arabia, Qatar and the UAE have moved past commitment into implementation, building emissions monitoring regimes and issuing operator guidance ahead of the 2027 deadline, but the obligation still lands on individual airlines and their compliance teams to model exposure route by route.
CORSIA phase timeline for Middle East carriers
| Phase | Period | Participation basis | Key date for Gulf carriers |
|---|---|---|---|
| Pilot | 2021-2023 | Voluntary | Baseline emissions data collection |
| First | 2024-2026 | Voluntary (GCC states opted in) | 2024 Sector's Growth Factor set at 0.154 |
| Second | 2027-2035 | Mandatory above 0.5% international RTK share | Final Phase 1 obligation notified Nov 2027, credits retired by 31 Jan 2028 |
Why does aircraft certification depend on foreign authorities in this region?
Because none of the four Middle East civil aviation authorities issue original type certificates for large aircraft; they all validate certificates issued elsewhere. GACA formally renders FAA type certificates valid rather than certifying independently. Qatar's QCAR 1002/2006 Article on aircraft certification builds acceptability around foreign type certificates and supplemental type certificates. Israel's CAAI holds an EASA Executive Director Decision allowing continued acceptance in the EU of release documents from Israeli manufacturers under Article 9(2) of Regulation (EU) No 748/2012, contingent on periodic EASA re-assessment of whether CAAI's oversight remains equivalent to EASA Part 21 standards, and separately holds a working arrangement with the UK CAA signed 20 April 2023 and a Bilateral Aviation Safety Agreement with the FAA covering Parts 21, 23, 25, 26, 27, 29, 31, 33, 34 and 35.
This dependency structure means a single foreign regulatory action, an FAA airworthiness directive, an EASA re-assessment outcome, a UK CAA technical implementation procedure update, can change compliance obligations in the Middle East without any local legislative process. Saudi Arabia's own Airworthiness Directive rule, GACAR Part 39, makes this explicit: ADs issued by the GACA-recognized foreign National Aviation Authority or the aircraft's state of design are automatically applicable to Saudi-registered aircraft, and operators need a GACA-approved Alternative Method of Compliance if they cannot meet the original directive on schedule.
What should compliance and airworthiness teams track before year-end 2026?
Three concrete deadlines sit inside the next twelve months. Qatar's remotely piloted aircraft and C2 link requirements under QCAR 096 of 2022 become enforceable on 26 November 2026. ICAO's revised Safety Management Protocol Questions apply to all USOAP Continuous Monitoring Approach audits after 1 August 2026, which will eventually reset the Effective Implementation scores that airlines and lessors use to benchmark counterparty risk. And every Gulf carrier flying international routes needs a working model of its 2027 CORSIA offsetting exposure well before the November 2027 notification, because building a sustainable aviation fuel or carbon credit strategy inside a two-month retirement window is not realistic.
None of these obligations are announced through a single regional channel. GACA, GCAA, QCAA and CAAI each publish through their own advisory circulars, safety decisions and amending regulations, in different formats and on different cadences, and ICAO layers its own Annexes, Electronic Bulletins and USOAP updates on top. Obsidian's AI regulatory companion is built to sit across exactly this kind of fragmented, tier-0 source landscape: it tracks GACA, GCAA, QCAA and ICAO publications as they are issued, flags the ones relevant to your fleet, routes or operations, and answers direct questions like "does this Saudi airworthiness directive apply to my aircraft type" with a citation back to the primary source, never presenting itself as an aviation expert, only as a verified companion to your own regulatory affairs team.
For teams that need programmatic access to the same tracked frameworks, the Obsidian MCP connects directly into AI assistants and internal tools, so a query about GCAA safety decisions or QCAR amendments returns the same primary-source answer whether it is asked in a browser or from inside an engineering workflow. Given how quickly four independent regulators are rewriting their drone, AAM and emissions rules in 2026, that is the difference between finding out about a compliance deadline from a Slack message and finding out from a grounded aircraft.