DIFC Annual Compliance Calendar: Filings, Deadlines and the New Accounts Rules

Ask five DIFC company owners what they must file each year and you will get five different lists, usually assembled from renewal reminder emails and half-remembered advice. That is not carelessness. The obligations sit with different authorities (the Registrar of Companies, the Commissioner of Data Protection, the Federal Tax Authority, the DIFC Government Services office), run on different clocks and have changed materially in the last few years, most visibly when the Confirmation Statement replaced the Annual Return and when UAE corporate tax absorbed most of the economic substance regime. This guide sets out the full annual cycle for a non-regulated DIFC company, in one place, in order.

Two Clocks, Not One

The first thing to internalise is that a DIFC company's compliance year runs on two separate clocks.

The anniversary clock is anchored to the date of incorporation. Licence renewal, the Confirmation Statement and, in practice, the data protection renewal all fall due around the anniversary each year.

The financial year clock is anchored to the company's financial year end. Accounts preparation, audit, the filing of financial statements with the Registrar and the corporate tax return all count forward from that date.

A company incorporated in March with a December year end therefore has meaningful deadlines in at least two distinct seasons of the year, which is precisely why a single renewal reminder from the DIFC portal is not a compliance calendar.

The DIFC Compliance Year at a Glance

Because the two clocks differ for every company, the cleanest way to present the cycle is by trigger date rather than by named month. Map your own incorporation anniversary and year end onto this table and you have your calendar.

Licence Renewal

Every DIFC company holds a commercial licence that must be renewed annually. Renewal is processed through the DIFC portal and is conditional on the company's house being in order: outstanding filings, unpaid fines and lapsed lease or registered address arrangements all surface at renewal and will hold it up. Because so much hangs off an active licence (the establishment card, visa sponsorship, bank relationships that check licence validity), treat the renewal window as a hard deadline with everything reconciled beforehand, not as the moment to discover a problem.

The Confirmation Statement

Older guides, and a surprising amount of current marketing content, still refer to the DIFC Annual Return. That filing has been replaced by the Confirmation Statement, and the difference is more than a rename. The Annual Return asked companies to re-submit a snapshot of their details each year. The Confirmation Statement instead asks the company to confirm that the information already held on the register is accurate: registered office, directors and officers, share capital, shareholders and ultimate beneficial ownership.

The practical consequence is that the Confirmation Statement rewards companies that file their event-driven changes promptly during the year (a director change, a share transfer, a new UBO) and exposes those that do not, because confirming inaccurate information is itself a breach. The statement is filed annually, typically alongside licence renewal, which makes the anniversary window the natural moment for a full registers review.

Financial Statements, Audit and Filing

The DIFC Companies Law requires companies to prepare financial statements for each financial year in accordance with internationally acceptable accounting standards, which in practice means IFRS for the overwhelming majority. Companies above the exemption thresholds must have those accounts audited by an auditor registered with the DIFC and file them with the Registrar of Companies within the prescribed window after year end.

Two points cause most of the confusion here. First, the small-company exemption: private companies meeting the criteria in the Companies Law, which turn on annual turnover and the number of shareholders, can typically dispense with the audit, but the test is applied year by year and a growth year can quietly pull a company back into audit scope. Second, Prescribed Companies enjoy lighter treatment, but lighter is not zero: accounting records must still be kept and the corporate tax computation still needs numbers to stand on. Given that the audit must be complete before both the Registrar filing and a well-supported tax return, appointing the auditor early in the new financial year, rather than after year end, is the single scheduling decision that protects everything downstream.

The UBO Register

DIFC companies must identify their ultimate beneficial owners, maintain a UBO register and keep the Registrar informed of changes. Unlike the annual filings, this is a continuous obligation: a change in ownership or control triggers a duty to update the register and notify within the prescribed period, not at the next anniversary. The annual Confirmation Statement then confirms the position. For holding structures with layered ownership, it is worth diarising a UBO review whenever anything changes upstream, because the DIFC entity's obligation bites even when the transaction happened three levels above it in another jurisdiction.

Data Protection Renewal

Every DIFC entity that processes personal data (in practice, every entity with employees, clients or suppliers who are natural persons) is registered with the Commissioner of Data Protection under the DIFC Data Protection Law and must renew that registration annually. Renewal is also the moment to confirm that the notified description of processing is still accurate: new HR systems, new marketing activities and new group data-sharing arrangements all typically warrant an updated notification. Companies conducting higher-risk processing may have additional obligations, including the appointment of a data protection officer, so the annual renewal is best treated as a short substantive review rather than a payment exercise.

UAE Corporate Tax

Corporate tax runs entirely on federal rails and is indifferent to DIFC anniversaries. Every DIFC company registers with the Federal Tax Authority, maintains adequate records, and files a corporate tax return within nine months of the end of each financial year, with any tax payable due by the same date. A 31 December year end means a 30 September filing deadline.

Qualifying Free Zone Person status, under which qualifying income is taxed at 0%, changes the rate, not the workload. Indeed it adds to the workload: the QFZP conditions require adequate substance, audited financial statements, transfer pricing compliance and monitoring of the de minimis threshold for non-qualifying revenue, all of which must be evidenced annually. Our separate guide to QFZP status in the DIFC works through the conditions in detail.

Economic Substance After Corporate Tax

The UAE economic substance regime dominated compliance calendars from 2019, with annual notifications and reports for companies conducting relevant activities. Following the introduction of corporate tax, the regime was substantially wound back: for financial years ending after the cut-over, the notification and reporting obligations have in practice fallen away, with substance now tested through the corporate tax framework instead. Companies should retain their historic ESR filings and respond to any open enquiries for earlier periods, but for current planning purposes the annual ESR filings no longer feature in the calendar for most DIFC companies.

DEWS, If You Employ

DIFC employers do not pay end-of-service gratuities the mainland way. Instead, the DIFC Employee Workplace Savings plan (DEWS) requires employers to make monthly contributions into a professionally managed savings plan for each eligible employee, calculated as a percentage of basic salary that steps up with length of service. The compliance points are enrolment of new joiners on time, accurate monthly contributions, and prompt processing when employees leave. Late or missed contributions are an employment law breach, not merely an administrative slip, and they surface quickly because employees can see their own plan balances.

Establishment Card and Immigration Renewals

Companies sponsoring visas hold an establishment card with DIFC Government Services that renews annually, and each sponsored employee's visa and Emirates ID renew on their own multi-year cycles. These are mechanical processes when the licence is active and fines are clear, and painful ones when they are not, because immigration renewals check licence status. The dependency chain runs licence, then establishment card, then visas: a delay at the top cascades down.

What DFSA-Regulated Firms Add on Top

Everything above applies to regulated firms too. On top of it, a DFSA-authorised firm lives with continuing supervision: periodic prudential returns, capital adequacy monitoring, an annual audited regulatory return, compliance and anti-money laundering reporting, controlled function maintenance and prompt notification of material changes. That is a distinct calendar in its own right and beyond this guide's scope; the point here is simply that DFSA obligations sit alongside, not instead of, the Registrar, tax and data protection cycle described above.

Penalties: How Non-Compliance Actually Bites

The DIFC publishes schedules of administrative fines for late filings, and the Federal Tax Authority does the same on the tax side. The amounts matter less than the mechanics. Fines escalate with time, outstanding breaches block licence renewal, a lapsed licence freezes visa processing and unsettles banks, and persistent default ends in strike-off, at which point the company's assets and contracts become a genuine problem. The compliance calendar fails in a specific way: one quiet miss in a busy quarter compounds into three linked problems by the next renewal. The cure is boring and effective, which is a calendar owned by someone whose job it is to watch it.

How a CSP Keeps This on Rails

This is, candidly, the core of what a corporate services provider does day to day. Atlas maintains a consolidated compliance calendar for each client company, mapped to its own anniversary and year-end dates, and runs the filings: licence renewal and Confirmation Statement preparation, registers and UBO maintenance, coordination of the audit and the Registrar filing, data protection renewal, corporate tax registration and return logistics with the tax adviser, and DEWS and immigration renewals where we administer them. The value is not any single filing, most of which are straightforward in isolation. It is that nothing is missed in the aggregate, and that changes during the year are filed when they happen rather than reconstructed at renewal. If your DIFC company's calendar currently lives in a renewal email and someone's memory, a short review with the Atlas team will put it on firmer ground.