Saudi Arabia 2026 M&A Regulatory Changes: Practical Guide for Cross‑border & Shari'ah‑compliant Deals

The landscape of M&A regulations in Saudi Arabia has shifted more in the first half of 2026 than in any comparable period, driven by a convergence of the Saudi Investment Law 2026, sweeping Companies Law amendments, and Capital Market Authority (CMA) rule changes that together rewrite the playbook for foreign entry, disclosure, merger control and Shari’ah‑compliant deal structuring. For general counsel, CFOs and PE buyers evaluating acquisitions or disposals in the Kingdom, these reforms are not abstract policy goals, they impose immediate, concrete obligations on transaction timelines, data‑room preparation and contractual risk allocation. This guide consolidates the 2026 regulatory wave into a single, actionable framework: approvals maps, due‑diligence checklists, sample clauses and structural options that deal teams can deploy now.

Five deal takeaways every advisor should note:

• Foreign entry simplified but screened. The Saudi Investment Law 2026 replaces the former foreign‑investment licensing regime administered by the Ministry of Investment (MISA) with a streamlined admission process, yet introduces a new national‑security screening mechanism for sensitive sectors.
• Beneficial ownership disclosure is now mandatory. Companies Law amendments require all Saudi entities to identify and register ultimate beneficial owners (UBOs) on the unified commercial register, directly affecting sell‑side data rooms and buyer verification protocols.
• CMA foreign‑securities barriers lowered. The CMA amendments that took effect in January 2026 broadened foreign‑investor access to listed Saudi securities, with the likely practical effect being a significant reduction of the former Qualified Foreign Investor (QFI) restrictions.
• Merger control thresholds tightened. Updated CMA merger‑control rules impose revised notification thresholds and shorter review windows, meaning deal teams must map filing obligations earlier in the transaction lifecycle.
• Shari’ah governance disclosure now explicit. SAMA’s Shari’ah governance disclosure requirements, effective from late 2024, apply to any M&A involving regulated financial institutions and demand pre‑clearance plus post‑completion reporting.

What Changed in 2026? A Quick Legislative Map of Saudi M&A Regulations

Understanding the full scope of changes to M&A regulations in Saudi Arabia requires mapping four distinct but interlocking legislative streams. Each reform carries specific transactional consequences that deal counsel must address at the structuring stage, not after signing.

The cumulative effect of these reforms is that a cross‑border M&A transaction in Saudi Arabia now triggers a wider net of regulatory touchpoints than at any previous time. Industry observers expect the practical consequence to be longer pre‑signing workstreams but faster post‑signing execution, provided the regulatory mapping is completed early.

How the 2026 M&A Rules Affect Cross‑Border Deal Structures in Saudi Arabia

The foreign investment rules Saudi Arabia enacted through the Saudi Investment Law 2026 fundamentally alter the entry calculus for international buyers. Where the previous regime required a standalone MISA foreign‑investment licence, often a multi‑week process with sector‑specific conditions, the new framework consolidates investor admission into a unified licensing portal and introduces the principle of equal treatment between foreign and domestic investors, subject to a negative list of restricted activities and a national‑security screening mechanism.

MISA Entry Routes Under the New Law

Foreign investors structuring cross‑border M&A in Saudi Arabia now generally follow one of three entry routes:

• Wholly foreign‑owned entity (WFOE) / LLC. The buyer incorporates a Saudi limited liability company with 100 per cent foreign shareholding. The Companies Law Saudi Arabia provisions on LLCs apply, including the new UBO disclosure requirements. For a detailed walkthrough, see establishing an LLC in Saudi Arabia for foreign investors and the companion guide on whether foreigners can own 100 per cent of a Saudi company.
• Branch or representative office. Suitable for advisory mandates or preliminary market entry but rarely used as the acquisition vehicle itself. Branch registration continues to require MISA approval.
• Joint venture with a Saudi partner. Often preferred for regulated sectors (healthcare, defence, mining) where local‑content requirements apply. JV formation under the 2026 rules follows the same MISA unified licensing process, but the shareholders’ agreement must now address UBO disclosure for both parties and include Shari’ah compliance covenants if the JV will operate in financial services. For sector‑specific guidance, see the guides on setting up an F&B company in Saudi Arabia, tech company formation and travel and tourism company setup.

Common SPV Routes: Pros and Cons

Many cross‑border buyers route acquisitions through a special‑purpose vehicle (SPV) domiciled in the UAE (DIFC or ADGM), Bahrain, or a European treaty jurisdiction. The advantages include simplified repatriation of dividends and access to bilateral investment treaties. The risk, however, is that the Saudi Investment Law 2026’s national‑security screening may apply look‑through analysis to the ultimate controller of the SPV, not merely the direct shareholder. Deal teams should assume that MISA will require full disclosure of the ownership chain above the SPV and budget additional time for that review.

Sector Regulator Triggers

Beyond MISA, cross‑border transactions may trigger approval requirements from sector regulators:

• SAMA, any acquisition of a stake in a bank, insurance company or payment provider above specified thresholds.
• Ministry of Health (MoH), healthcare sector acquisitions.
• Communications, Space & Technology Commission (CST), telecoms and IT infrastructure.
• General Authority of Zakat and Tax (GAZT), tax clearance certificates and withholding‑tax implications on share transfers.

Early mapping of these triggers is critical: sector approvals can add four to twelve weeks to the pre‑completion timeline, and early indications suggest that regulators are enforcing the new rules strictly during the initial implementation period.

Due Diligence, Disclosure and Beneficial Ownership Under the Companies Law Saudi Arabia

The beneficial ownership disclosure regime introduced by the Companies Law amendments is the single most disruptive change for M&A due diligence in the Kingdom. Every Saudi company, listed or private, must now identify its UBOs (natural persons who ultimately own or control the entity) and register them on the unified commercial register maintained by the Ministry of Commerce.

Seller Preparation Checklist

• Compile a complete UBO schedule identifying every natural person with direct or indirect ownership of 5 per cent or more (or any person exercising de facto control regardless of shareholding).
• Cross‑reference the UBO schedule against the unified commercial register to confirm that all filings are current; rectify any discrepancies before the data room opens.
• Prepare a disclosure letter that addresses the UBO position as at signing and includes an undertaking to update the register at completion.
• Confirm that no UBO appears on any sanctions list (Saudi, UN, US/OFAC, EU), this is now a pre‑condition for many institutional buyers.
• Ensure that minority shareholders have signed UBO declarations where they hold indirect interests through layered structures.

Buyer Verifications and UBO Escalation Triggers

Buyers should treat UBO verification as a standalone workstream, not a subset of corporate‑structure diligence. Red flags that require escalation include:

• Nominee shareholders or undisclosed trust arrangements in the ownership chain.
• Discrepancies between the commercial register UBO filing and the information provided in the data room.
• UBOs resident in jurisdictions with which Saudi Arabia does not have mutual legal‑assistance arrangements.
• Changes to the UBO structure in the 12 months preceding the transaction, these may indicate pre‑sale restructuring to avoid disclosure.

Sample UBO disclosure clause (for SPA / SHA):

“The Seller warrants that the UBO Schedule annexed hereto is true, complete and accurate as at the date of this Agreement and that all UBO information has been duly filed with the unified commercial register in accordance with the Companies Law (as amended). The Seller shall indemnify the Buyer against any loss arising from a breach of this warranty, including any regulatory penalty imposed by the Ministry of Commerce.”

Reporting Obligations by Entity Type

CMA Approvals, Securities and Merger Control: Practical Steps

The CMA’s role as gatekeeper for Saudi M&A regulations has expanded through two parallel tracks: the January 2026 CMA amendments on foreign securities participation and updated merger‑control notification requirements. Deal teams must now navigate both tracks in parallel.

Private Transaction Route vs Public Takeover

For private transactions (share sales in unlisted companies), the CMA is typically not involved unless the target holds a CMA licence (e.g., an authorised person or fund manager). In those cases, a change‑of‑control notification and, in some instances, prior CMA approval are required before completion. The documentation package generally includes a completed notification form, a detailed description of the transaction, and evidence that the proposed new controller meets CMA fit‑and‑proper requirements.

For public takeovers of Tadawul‑listed companies, the CMA’s Merger and Acquisition Regulations prescribe a structured timetable. The acquirer must appoint a CMA‑authorised financial adviser, submit a formal offer document for CMA review, and observe the mandatory offer period once the acquisition threshold is crossed. The January 2026 CMA amendments on foreign securities are expected to simplify the documentation required of foreign bidders by reducing the former QFI‑related prerequisites, though deal teams should confirm the precise scope of remaining requirements directly with the CMA or their authorised adviser.

Merger Control Thresholds and Timing

Updated merger control rules in Saudi Arabia require notification to the General Authority for Competition (GAC), or the CMA where applicable, when the combined turnover or asset thresholds of the merging parties are exceeded. Industry observers expect the revised thresholds to capture a broader range of mid‑market transactions than the previous regime. The recommended approach is to run a preliminary merger‑control assessment during the indicative‑offer stage and include a CMA/GAC filing condition precedent in the SPA.

Indicative timeline for CMA filings (public offer):

• Weeks 1–2: Appoint CMA‑authorised financial adviser; prepare preliminary approach letter to the CMA.
• Weeks 3–5: Submit formal offer document and supporting materials; CMA review period begins.
• Weeks 6–8: CMA comments and revisions; target board opinion published.
• Weeks 9–12: Offer period open; shareholder acceptances collected; CMA final clearance.

Shari’ah‑Compliant M&A: Governance, Approvals and Deal Structures

Structuring a Shari’ah‑compliant M&A transaction in Saudi Arabia requires more than avoiding interest‑bearing debt in the financing stack. The SAMA Shari’ah governance disclosure requirements, applicable to banks, insurance companies and other regulated financial institutions, impose affirmative obligations on both the acquirer and the target to demonstrate that the transaction, its financing and its post‑completion governance framework all conform to Shari’ah principles.

Shari’ah Governance and SAMA Rules

Under the SAMA Rulebook, any change‑of‑control transaction involving a SAMA‑regulated entity requires the acquirer to demonstrate:

• That the acquisition financing is structured using Shari’ah‑compliant instruments (Murabaha, Ijara, Sukuk or equity).
• That the target’s existing Shari’ah board will remain in place or be replaced by an equally qualified Shari’ah supervisory committee.
• That post‑completion Shari’ah governance disclosures will be made to SAMA in accordance with the Rulebook requirements.
• That any non‑Shari’ah‑compliant assets or revenue streams in the target’s portfolio are identified and a remediation plan is presented to SAMA before completion.

Structuring Options for Shari’ah‑Compliant Acquisitions

Three principal structures are used in Shari’ah‑compliant M&A in the Kingdom:

• Asset sale (Murabaha structure). The acquirer purchases the target’s assets at a marked‑up price paid in instalments. This structure offers clean Shari’ah compliance but triggers transfer taxes and requires asset‑by‑asset due diligence.
• Share sale with Islamic financing. The shares are acquired using Murabaha or Sukuk financing. The SPA must include Shari’ah compliance representations and a covenant that the target will maintain Shari’ah‑compliant operations post‑completion.
• SPV / Islamic fund structure. A Shari’ah‑compliant investment fund or SPV raises capital through Sukuk issuance and acquires the target. This approach is common for large‑cap acquisitions and private‑equity buyouts where multiple investors participate. The SPV’s constitutional documents must embed Shari’ah governance provisions and appoint an independent Shari’ah committee.

Sample Shari’ah compliance representation clause:

“The Buyer represents and warrants that (a) the financing of the acquisition has been structured in compliance with Shari’ah principles as confirmed by an independent Shari’ah committee, and (b) the Buyer shall procure that the Target maintains its Shari’ah‑compliant status following Completion, including the retention or replacement of the Target’s Shari’ah supervisory board.”

Practical Deal Checklist, Sample Clauses and Red Flags

The following checklists and sample clauses are designed to help deal teams operationalise the 2026 changes. They should be adapted to each transaction’s specific facts and reviewed by Saudi‑qualified legal counsel.

Approvals Tracker

Key SPA Clauses to Add or Strengthen for 2026

• UBO disclosure warranty and indemnity. See the sample clause in the due‑diligence section above. Ensure the indemnity covers regulatory penalties and any third‑party claims arising from inaccurate UBO disclosure.
• CMA approval condition precedent. “Completion shall be conditional upon receipt of CMA approval for the Transaction (or confirmation that no such approval is required) and, where applicable, clearance from the General Authority for Competition.”
• Shari’ah compliance covenant. Include where the target operates in financial services or where the buyer’s financing is Shari’ah‑structured (see the sample Shari’ah representation clause above).
• National‑security screening condition. “If the Transaction is subject to national‑security screening under the Saudi Investment Law 2026, the Buyer shall promptly submit all required information to MISA and use reasonable endeavours to obtain clearance within [X] Business Days.”
• Foreign‑currency repatriation and escrow. Where the purchase price is denominated in a foreign currency, include mechanics for SAR conversion, Central Bank reporting and escrow arrangements that comply with Saudi exchange‑control rules.

Red flags that should trigger enhanced review:

• Target operates in a sector on the Saudi Investment Law 2026 negative list.
• UBO chain includes entities in non‑cooperative tax jurisdictions.
• Target has outstanding regulatory proceedings with MISA, CMA, SAMA or the Ministry of Commerce.
• Acquisition financing involves conventional interest‑bearing instruments where the target holds a Shari’ah‑compliant licence.
• Seller proposes to complete before all regulatory approvals are obtained.

Illustrative Deal Playbooks: Three Structures in Practice

The following three scenarios illustrate how the 2026 M&A regulations in Saudi Arabia apply in practice. Each scenario identifies the critical regulatory steps and flags where local counsel involvement is essential.

• Scenario 1, Public offer by a foreign PE fund. A London‑based PE fund bids for a Tadawul‑listed Saudi logistics company. Key steps: (i) appoint a CMA‑authorised financial adviser; (ii) submit MISA unified‑licence application for the acquisition SPV; (iii) file the offer document with the CMA; (iv) run the mandatory offer period; (v) confirm merger‑control clearance with the GAC. Local counsel is critical for CMA liaison and Arabic‑language documentation. Expected timeline: 12–16 weeks from preliminary approach to completion.
• Scenario 2, Private sale of a Saudi LLC to a UAE‑based strategic buyer. A Dubai industrial group acquires 100 per cent of a private Saudi manufacturing LLC. Key steps: (i) MISA unified‑licence application; (ii) UBO due diligence and verification against the commercial register; (iii) SPA with UBO warranty, national‑security screening CP and post‑completion register update; (iv) GAZT tax clearance for the share transfer. Expected timeline: 6–10 weeks.
• Scenario 3, Shari’ah‑compliant JV in the financial‑services sector. A Gulf‑based Islamic bank and a Saudi insurance company form a JV to offer takaful products. Key steps: (i) SAMA pre‑clearance for change‑of‑control and new Shari’ah governance plan; (ii) MISA licence for the foreign JV partner; (iii) JV agreement with Shari’ah compliance covenants, independent Shari’ah board appointment and SAMA post‑completion disclosures; (iv) CMA notification if any partner’s listed securities are affected. Expected timeline: 14–20 weeks due to SAMA review.

Conclusion: Immediate Actions for Deal Teams Navigating Saudi M&A Regulations

The 2026 regulatory wave demands a front‑loaded approach to transaction planning. Deal teams advising on M&A regulations in Saudi Arabia should take four immediate steps. First, conduct UBO screening of both the target and the buyer’s own structure before the first round of due diligence begins. Second, map every regulatory approval, MISA, CMA, GAC, SAMA and sector regulators, at the indicative‑offer stage and build the approval timeline into the SPA’s long‑stop date. Third, integrate Shari’ah due diligence into the standard workstream wherever the target holds a financial‑services licence or the financing involves Islamic instruments.

Fourth, update template SPAs and shareholders’ agreements with the new clauses required by the Companies Law beneficial ownership regime, the Saudi Investment Law’s national‑security screening mechanism and the CMA’s revised merger‑control rules. Early coordination with Saudi‑qualified counsel is not optional, it is the difference between a deal that closes on time and one that stalls at the regulatory gate.

Sources

1. Capital Market Authority (CMA), Regulations / Implementing Regulations
2. Ministry of Investment (MISA), Saudi Investment Law materials
3. Ministry of Commerce, Companies Law official publications
4. SAMA Rulebook, Shari’ah governance disclosure requirements
5. Baker McKenzie, Saudi M&A legal framework
6. Saudimergersacquisitions, Companies Law M&A impact
7. KPMG, Doing business in Saudi Arabia 2026
8. Chambers Practice Guides, Saudi Arabia M&A