ESG Regulatory Compliance in the Middle East: UAE, Qatar, Saudi Arabia

On 30 May 2025, the United Arab Emirates' Federal Decree-Law No. 11 of 2024 on the Reduction of Climate Change Effects entered into force, and every entity generating greenhouse gas emissions in the country, including free zone businesses with no size threshold, now has until 30 May 2026 to register on the national MRV platform and submit a compliant emissions report. Miss it, and the fine runs from AED 50,000 to AED 2,000,000, doubling to AED 4,000,000 for a repeat violation within two years. Two years earlier, that obligation did not exist. That is the pace of change defining ESG regulation across the Middle East right now.

The problem for compliance teams is that this pace is not synchronized. The UAE just made emissions reporting mandatory for virtually every business. Qatar has quietly built one of the most prescriptive ISSB-aligned regimes in the world, live since 1 January 2026. Saudi Arabia is still officially voluntary while behaving like it is not. Israel has no ESG law at all. A single "Middle East ESG strategy" built around one of these four models will misjudge the other three.

Layer in the EU's Carbon Border Adjustment Mechanism, which entered its definitive charging phase on 1 January 2026 and now taxes embedded carbon in Gulf aluminum and steel exports on arrival in Europe, and ESG has stopped being a reputational exercise for companies operating in the region. It is now a market-access question with named regulators, named deadlines and named fines attached.

Which regulators actually drive ESG disclosure in the Middle East?

Four separate bodies, each running a distinct model. In the UAE, the Securities and Commodities Authority (SCA) governs listed-company sustainability reporting under its Corporate Governance framework, while the Ministry of Climate Change and Environment (MOCCAE) enforces the Climate Change Law's emissions reporting duty on essentially every business, listed or not. In Qatar, the Qatar Financial Markets Authority (QFMA) sets the rules for companies on the Qatar Stock Exchange, and the Qatar Financial Centre Regulatory Authority (QFCRA) separately regulates firms authorized within the QFC. In Saudi Arabia, the Capital Market Authority (CMA) and the Saudi Exchange (Tadawul) issue guidance rather than binding rules for most listed companies, reserving mandatory disclosure for debt issuers. In Israel, the Israel Securities Authority (ISA) enforces existing securities and prospectus regulations that touch environmental risk but stops short of a dedicated ESG reporting law.

Is ESG reporting mandatory for UAE-listed companies and businesses?

Yes, on two separate tracks that often get conflated. Under Article 76 of the SCA's Governance Code for Public Joint Stock Companies (Chairman of SCA Board Decision No. 03 R.M. of 2020), every PJSC listed on the Abu Dhabi Securities Exchange or the Dubai Financial Market must publish an annual sustainability report covering environment, society, and economy and governance, submitted within 90 days of financial year end or before the annual general meeting, whichever is earlier.

The second, broader track is Federal Decree-Law No. 11 of 2024, which applies regardless of listing status. Entities register on the Integrated Emissions Quantification Tool at mrv.ae, launched by MOCCAE on 15 October 2025, to measure and report Scope 1 and Scope 2 emissions, with Scope 3 expected to follow from 2027. The compliance deadline is 30 May 2026, and while MOCCAE has signaled a possible extension while technical guidance is finalized, no revised date has been confirmed, so treating the original date as final is the safer planning assumption.

What does Qatar's 2026 ISSB mandate actually require?

Full IFRS S1 and IFRS S2 reporting, not a voluntary alignment exercise. The QFMA's Governance Code for Listed Companies, issued under Board Decision No. 5 of 2025 and effective from 17 August 2025, requires under Article 11 and Appendix 1.4 that companies listed on the Qatar Stock Exchange main market use ISSB Standards for their sustainability disclosures. Separately, the QFCRA's GENE (Corporate Sustainability Reporting) and Minor and Technical Amendments Rules 2025, issued 26 June 2025, took effect on 1 January 2026 for all Category A firms, meaning banks, insurers and discretionary investment managers, plus any Category B firm the QFCRA specifically designates.

The distinction matters because a group with both a QSE-listed parent and a QFC-authorized subsidiary faces two separate ISSB obligations from two separate regulators on two separate legal bases, and neither compliance track automatically satisfies the other.

Is Saudi Arabia's ESG disclosure regime still voluntary?

Mostly, but the gap between voluntary and expected is closing fast. The CMA's 2019 ESG Disclosure Guidelines and the Saudi Exchange's 2021 ESG Disclosure Guidelines remain non-binding for most listed companies, yet the market has already moved past them: 94 listed firms published ESG reports in 2024, up from 81 in 2023, and roughly 65 percent of the top 100 Tadawul companies by revenue now report on ESG even without a legal requirement to do so.

Mandatory disclosure already exists for one category. In 2025, the CMA approved guidelines for issuing green, social, sustainable and sustainability-linked debt instruments, which bind any issuer using that financing channel to ongoing use-of-proceeds and impact disclosure. On the broader market, the CMA and Tadawul have signaled that ISSB-aligned reporting under IFRS S1 and S2 will become mandatory starting in 2026 for companies in the TASI 30 index, phasing to all listed entities by 2028, with Scope 3 emissions initially on a comply-or-explain basis. A company waiting for the CMA to formally confirm this timeline before building its reporting infrastructure will start the process later than its TASI 30 peers already have.

Why does Israel lag the rest of the Gulf on mandatory ESG disclosure?

Because no dedicated ESG law has been enacted, and existing obligations only reach environmental risk indirectly. Israeli reporting corporations disclose environmental risk under the Securities Regulations (Periodic and Immediate Reports) 1970 and the Prospectus Details Regulations 1969, both decades older than the ESG concept itself. In September 2024, the Israel Securities Authority published Audit Findings on Disclosure and Reporting of Environmental Risks in Reporting Corporations, concluding that most companies had no formal environmental risk policy, no board-level reporting on the topic, and no documented methodology for judging risks immaterial, a finding the ISA treats as a compliance failure under existing law even though no standalone ESG statute compels a full sustainability report.

The direction of travel is clear even without a mandate: academic and industry commentary through 2026 has repeatedly called on the ISA to adopt mandatory ISSB-based reporting for public companies excluding small corporations, positioning Israel as the outlier that eventually converges toward its Gulf neighbors rather than the exception that stays apart.

How does the EU's carbon border tax reshape compliance priorities for Gulf exporters?

The Carbon Border Adjustment Mechanism entered its definitive, certificate-purchasing phase on 1 January 2026, and for GCC exporters the exposure concentrates almost entirely in aluminum. Bahrain and the UAE carry the highest exposure, both in absolute terms and relative to GDP, while Saudi Arabia and Oman face moderate exposure and Qatar and Kuwait are largely unaffected. For Saudi Arabia specifically, CBAM now touches roughly 475 million euros of annual metals trade with the EU, and projected certificate costs are expected to climb to about 54 million euros a year by 2034 as EU free allocation phases out and the certificate price rises from around 84 to 146 euros per tonne of CO2.

Saudi steel producers using Direct Reduced Iron-Electric Arc Furnace technology already run 29 percent below the global average carbon intensity for steel, which helps, but CBAM liability is calculated against verified emissions data submitted by the exporter, not assumed efficiency. An exporter that cannot produce audited, shipment-level emissions figures gets assigned a punitive EU default value instead of its actual, lower footprint, turning a real efficiency advantage into a paper liability. This is precisely the kind of cross-border regulatory dependency that a region-only view of ESG compliance misses entirely.

How should a compliance team monitor five different ESG regimes without five separate subscriptions?

Treat SCA, MOCCAE, QFMA, QFCRA, the CMA and the ISA as six distinct, tier-0 sources rather than folding them into one "Middle East ESG" bucket that will inevitably miss a jurisdiction-specific deadline. Obsidian tracks CSRD, ESRS, SFDR, EU Taxonomy and ISSB Standards alongside dedicated per-jurisdiction monitoring for the region's regulators, so a QFCRA rule amendment or a MOCCAE Cabinet Resolution on Climate Law penalties reaches the right compliance owner the week it publishes rather than the quarter someone happens to check the source directly. See how full ESG and sustainable finance coverage works on the monitoring page.

For teams tracking both a UAE Climate Law deadline and a Qatar ISSB filing at the same time, the AI companion gives a fast, source-linked answer to questions like "does our QFC subsidiary need a separate IFRS S2 report from our QSE-listed parent" without waiting days for outside counsel, and the MCP integration lets that same verified regulatory data flow directly into whatever AI assistant the compliance function already uses for drafting and internal review. The AI companion is a verified regulatory reference, never a substitute for legal judgment on a specific filing.

What should a Middle East ESG compliance team do next?

Start by separating the entities that face a binding deadline from those that do not: any UAE entity generating emissions is on the clock for 30 May 2026 regardless of listing status, while a Saudi company outside the TASI 30 still has a genuine planning window before 2028. Then map every legal entity against its specific regulator rather than its country, since a QFC-authorized subsidiary and its QSE-listed parent answer to different rules on different timelines even though both sit in Qatar.

Finally, if the business exports aluminum, steel or cement into the EU, build a verified, shipment-level emissions dataset now rather than after the next CBAM certificate bill arrives; the gap between an audited actual figure and an EU default value is where real efficiency gains either get captured or wasted. None of that requires guessing which regulator moves next. Obsidian's per-jurisdiction alerts and verified official sources exist so that a QFMA amendment or a MOCCAE Cabinet Resolution reaches your team the same week it is published, not the same quarter.