Prudential reporting changes introduced by the Dubai Financial Services Authority (DFSA) are now in force, while credit rating agencies and firms affected by separate rulebook amendments have until 1 January 2027 to prepare for the next phase of regulatory changes. The amendments, finalised after consultations under Consultation Papers No. 172 and 174, affect reporting requirements, credit rating agency regulation and specified provisions governing financial business in the Dubai International Financial Centre (DIFC).
The DFSA published its notice of amendments on 1 October 2026, confirming that its Board had considered responses received during the consultation process before adopting the final rulemaking instruments. The prudential changes took effect on 2 October, followed by a separate announcement on 5 October detailing the revised requirements for credit rating agencies and prudential reporting.
The immediate change concerns the Prudential - Investment, Insurance Intermediation and Banking Business module, commonly referred to as the PIB module. Information previously submitted through forms B180 and B120 is now incorporated into a redesigned B110 form. The DFSA has specified that authorised firms must complete the data items applicable to their activities, rather than treating every item as relevant to every institution.
The revised arrangement is intended to streamline reporting while allowing the regulator to obtain the information it needs to monitor firms and assess their continuing compliance. For regulated institutions, the transition requires attention to the relationship between the revised reporting template and the systems used to collect, validate and submit financial and prudential data.
The consolidation does not remove the need for firms to understand which information applies to their individual permissions and business models. Institutions should establish whether their reporting processes capture the required data, whether internal records reconcile with regulatory submissions and whether responsibility for completing and checking the revised form is clearly allocated.
The practical effect will depend on how firms implement the new template. A consolidated reporting channel may reduce duplication, but the quality of the information received by the regulator will continue to depend on the accuracy of the underlying records and the controls applied before submission.
The second major element concerns credit rating agencies. Under the revised framework, the DFSA is adopting a more principles-based approach to assessing relationships that may cause, or reasonably be perceived as causing, conflicts of interest. The amendments also remove certain duplicative or unnecessarily prescriptive disclosure requirements, while retaining the overarching obligation to provide sufficient information for users to understand how a credit rating was determined.
The revised requirements are scheduled to apply from 1 January 2027, giving affected agencies a defined period to review their arrangements before commencement. Their preparation will need to address how potential conflicts are identified and assessed, how relevant decisions are documented and whether disclosures continue to provide users with a meaningful explanation of the rating process.
Credit ratings are used by investors and financial institutions as one input in evaluating credit risk. They can inform lending decisions, portfolio assessments and the terms on which borrowers seek financing, but they do not guarantee repayment or replace independent due diligence. The DFSA’s retention of a general disclosure obligation is therefore significant: reducing prescriptive requirements does not eliminate the need for users to understand the basis of a rating.
The DFSA’s 1 October notice also confirmed changes to the Conduct of Business module, the Islamic Finance Rules and the Glossary module. The relevant rulemaking instruments are scheduled to take effect on 1 January 2027. Firms should identify which changes apply to their activities and avoid treating the October and January provisions as a single set of obligations with a common commencement date.
The amendments followed the conclusion of consultation processes under CP 172, concerning enhancements to the Islamic Finance Rules, and CP 174, which included proposals relating to credit rating agencies and prudential reporting. The final rules may differ from the proposals originally published for consultation, making the adopted instruments, rather than the consultation papers alone, the appropriate reference for determining the requirements that apply.
The DFSA has also confirmed that proposals concerning crypto and investment tokens under CP 174 will be considered at a later stage. Those outstanding proposals are separate from the amendments already finalised and should not be presented as requirements that have come into force.
For firms operating in the DIFC, the immediate task is to verify the reporting obligations already in effect and prepare for the provisions scheduled for January. Compliance teams should review the applicable rulebook changes, confirm the relevance of individual reporting items and identify any adjustments needed to internal procedures, systems or staff responsibilities.
The next stage will test whether the revised arrangements deliver their intended operational benefits while preserving the information needed for supervision. The DFSA has finalised the rule changes and established their commencement dates; their practical effect will emerge through implementation and the regulator’s continuing oversight.