Halvorsen & Reith

Director exposure check in the Dubai International Financial Centre

A director exposure check in the DIFC identifies what a board member is actually exposed to once appointed inside a common law free zone that runs its own companies law and its own court system, separate from onshore Dubai. That separation changes what exposure means in practice: liability, disclosure and removal all run through a register and a judiciary that sit outside the UAE's federal structure. This page sets out where the position departs from a generic UAE appointment and where it does not.

A holding group appoints a UAE-resident individual as sole director of its DIFC-registered subsidiary, expecting the appointment to mirror the parent's onshore board terms. Six months later the subsidiary enters a related-party transaction and the director asks whether the DIFC's own conflict rules and disclosure obligations differ from what the group's other entities apply. Nobody on the group's side had confirmed the answer before the appointment was signed.

The sections below identify what actually changes for a director inside the Dubai International Financial Centre, what has to be filed or disclosed as a result, and where this firm's advisory work on the point stops.

What changes in the Dubai International Financial Centre

There is no separate "director exposure" licence or registration layered on top of ordinary company law inside the DIFC. Exposure arises from the same source it arises from in any common law company: the duties a director owes to the company itself. What changes is the forum in which those duties are tested, the register on which the appointment is recorded, and the body of case law a court will draw on when it decides whether a director's conduct fell short. A director exposure check in the DIFC therefore does not ask whether a duty exists; it asks which court will hear a dispute about it and what the local company law regime requires before that question ever reaches a courtroom.

This work sits under the firm's broader director exposure check service, and the DIFC variant of it exists because the free zone operates a distinct body of company law, administered through its own registrar, and applies it through its own courts rather than onshore Dubai's civil system. A group that treats a DIFC appointment as identical to an onshore UAE appointment, or to an appointment in a different free zone, is usually wrong on at least one point that matters: the constitution of the company, the register that records the appointment, or the court that would hear a claim.

Shareholder rights are affected by the same separation. A shareholder seeking to remove a director, inspect records or challenge a related-party decision does so under the DIFC's own company law and before the DIFC's own courts, not under a parallel onshore procedure. A board that assumes the two systems run in parallel is assuming something that is not established without checking the company's own constitutional documents first.

The local requirement or test that drives the work

The test that drives a director exposure check in the DIFC is not a single rule but a sequence of three questions. First, what powers does the company's constitution actually grant this director, and has the director acted within them. Second, does the conduct in question amount to a breach of the duties of care, skill and loyalty as those duties are understood under the DIFC's own company law, which draws heavily on common law principles rather than a civil code. Third, and this is the question groups most often skip, does the director's day-to-day role in substance amount to carrying on a regulated financial services activity inside the free zone, in which case a separate licensing question sits on top of the company law question.

That third question is where personal exposure moves from theoretical to immediate. Where an appointed director's function in substance amounts to carrying on a licensable financial service inside the DIFC, exposure attaches to that individual personally from the date the activity begins, not from the date any licence application is filed, and once the activity has been carried on without the necessary authorisation the position cannot be cured by applying for the licence afterward. Company law and personal liability meet at exactly this point, and it is the point most director exposure checks outside the DIFC do not think to ask about, because most jurisdictions in this comparison do not layer a free zone financial regulator on top of ordinary company law.

A useful comparison is the equivalent check in England & Wales, where the company law duties are structurally similar but there is no equivalent free zone regulator sitting alongside the companies registry. The DIFC's dual layer, company law plus a financial services regime, is the single fact that changes the shape of the exercise most.

The filing, register or forum consequence

Everything a director exposure check in the DIFC concludes eventually has to be reconciled against what the Dubai International Financial Centre corporate register actually shows. The register records the identity of each director, the date of appointment and resignation, and the company's registered office within the free zone. None of this is discretionary: a company operating inside the DIFC files against a defined set of fields, and what is on file becomes the record a court, a counterparty or a regulator will rely on if a dispute arises later, regardless of what the parties privately understood.

Once a director's resignation is filed with the registrar, that filing becomes the fact anyone checking the register will rely on for any later question about who held governance responsibility during a given period. If the underlying conduct during that period involved carrying on a regulated activity without the necessary authorisation, the resignation filing does not retrospectively remove the exposure that had already attached before it was made. The register closes a chapter on who is currently accountable; it does not rewrite what happened while someone was.

The forum consequence follows the same logic. A dispute concerning a director's conduct inside a DIFC company is heard by the DIFC's own courts, applying the DIFC's own procedural rules and its own accumulated case law, not onshore Dubai's civil courts. That matters for evidence: the regulatory filing history, board minutes and register entries that a DIFC court will weigh are assessed against common law standards of directors' duties and personal liability, which is a different analytical framework from a civil code approach. A board that has only ever dealt with civil-law jurisdictions should not assume the same categories of evidence carry the same weight. For a side-by-side view of how personal exposure is scoped across several jurisdictions at once, see the comparison of personal director liability by jurisdiction.

Before relying on any timetable connected to a filing, a board should confirm four things against the company's own record, not against a generic description of the DIFC regime:

A holding group whose DIFC subsidiary changes its board composition without updating these four points is not exposed because the change was wrong; it is exposed because nobody checked whether the record matches what actually happened.

A structure moving into or out of the free zone raises a related question, addressed separately in the firm's note on redomiciliation and continuation in the DIFC: a director's exposure during a continuation process is assessed under both the departing and the receiving regime, and the two do not always agree on when responsibility passes.

A group weighing whether to restructure its board before or after a filing deadline is, in practice, deciding which court and which register will have jurisdiction over the period in question. That decision is worth confirming before the filing is made, not after.

Groups facing exactly this timing question benefit from having the position confirmed against their own constitutional documents rather than against a general description of the regime.

Whether the current board composition is defensible on the facts as they stand is a separate question from whether it is defensible on the register as it currently reads, and the two answers do not always match.

What this service does not include in the Dubai International Financial Centre

This engagement does not include acting as a director, secretary, nominee shareholder or trustee for a DIFC company, and it does not include supplying, sourcing or arranging for anyone else to take on those roles. It also does not include any activity for which a trust or corporate service provider licence is required within the free zone. That boundary exists because the firm holds no such licence and does not operate as a regulated services provider in the DIFC or anywhere else; it is a constraint on what the firm is licensed to do, not a preference about how it works.

What the engagement produces instead is the mapping the board actually needs to make its own decision: the requirement identified against the company's constitution and the DIFC's company law, the criteria a proposed director's role would have to meet to avoid a licensing question, a review of the appointment terms as drafted, and an assessment of where personal exposure currently sits given the register as it stands. The board then decides who to appoint, and on what terms; this work exists to make sure that decision is made with the actual position in front of it, not an assumed one.

A structure with more than one office holder inside the DIFC should also confirm whether the same conflict rules apply equally to every director, since shareholder rights connected to related-party approval can differ depending on how the constitution allocates authority between the board and the shareholders.

A holding company whose sole DIFC director resigns shortly before an annual filing falls due presents two problems at the same time, and only one of them is still fixable once the deadline has passed: the filing itself can usually be brought current, but any exposure that attached to the outgoing director's conduct before resignation cannot be undone by the resignation.

Structures carrying this kind of open question are better served by having the position confirmed than by assuming the DIFC's regime mirrors either onshore UAE or another free zone the group has dealt with before.

Assess your director exposure

Write to info@hreithlaw.com with the jurisdiction and the structure.

A board considering whether a proposed appointee's role edges into a licensable activity should have that question answered before the appointment is signed, not after a regulator raises it.

Assess your director exposure

Write to info@hreithlaw.com with the jurisdiction and the structure.

Frequently asked questions

What evidence should the board keep on a director exposure check in the Dubai International Financial Centre?
The board should keep the constitutional documents that define the director's authority, the current extract from the corporate register, and any board minutes recording decisions that touch a regulated activity. A separate note on what evidence to keep after a director exposure check sets out the fuller list and why each item matters on its own.
What happens if a director exposure check in the Dubai International Financial Centre is not addressed?
The exposure does not disappear for having gone unchecked; it simply remains unassessed until a dispute, a regulatory question or a transaction forces the point. By that stage the register entries and filing history are already fixed, which narrows what can still be corrected.
How often should a director exposure check in the Dubai International Financial Centre be reviewed?
It is worth reviewing whenever the company's constitution changes, whenever a director's day-to-day role changes, and before any related-party transaction or continuation process. A fixed annual cycle is less useful than reviewing at the point something in the underlying facts actually moves.
Does a director exposure check in the Dubai International Financial Centre change for a foreign-owned company?
The company law and forum position are the same regardless of who owns the shares. What changes for a foreign-owned company is usually the board's familiarity with common law duties and with a register-based system, which is where most of the confusion in practice actually originates.
What does a director exposure check in the Dubai International Financial Centre require in practice?
It requires reading the company's own constitution rather than a generic description of the regime, confirming what the corporate register currently shows, and testing whether any part of the director's role touches a regulated financial services activity. Each of those three steps can change the answer on its own.

Freya Lindqvist, expert author, director duties. Freya advises boards and holding groups on the personal exposure directors carry inside common law free zones, including the DIFC and comparable jurisdictions. Her work concentrates on the point where a director's role moves from administrative into personally exposed conduct, and on the register and disclosure consequences that follow from that shift.

By Lukas Fenn