Regulatory Approvals for Cross‑border M&A in Saudi Arabia (2026): SAMA, MISA & Sectoral Consents Explained

M&A regulatory approvals Saudi Arabia now sit at the centre of nearly every cross‑border transaction closing in the Kingdom, and in 2026 the number of deals triggering multiple parallel consents has climbed sharply. Reforms to the Companies Law, an ambitious foreign direct investment agenda and a visible push toward more efficient licensing mean acquirers can no longer treat regulatory clearance as an afterthought bolted onto the final week of a deal. This guide sets out, in practical order, when consent is required, which regulator you file with first, how long each track typically takes, and the drafting levers that protect value between signing and completion.

It is written for in‑house counsel, private equity and corporate buyers who need a defensible clearance roadmap rather than a hedged overview, and it takes clear positions on how to sequence and allocate approval risk.

Executive summary and 2026 reform snapshot

The approvals that most often block or delay a Saudi cross‑border deal are foreign investment registration through the Ministry of Investment of Saudi Arabia (MISA), change‑of‑control consent from the Saudi Central Bank (SAMA) where a financial licence holder is involved, merger clearance from the General Authority for Competition (GAC), and sector‑specific licences for telecom, healthcare, energy and defence targets. Listed targets add a further layer of Capital Market Authority (CMA) rules. In our view, the single most important discipline for 2026 is to map every triggered approval at the term‑sheet stage and to allocate the risk of each one explicitly in the sale and purchase agreement (SPA), not to leave it to a generic “regulatory consents” condition precedent.

Companies Law and FDI promotion, headline direction

The current reform programme continues the modernisation of the Saudi corporate and investment framework. The Companies Law (issued under Royal Decree in 2022 and effective from early 2023) streamlined corporate forms and governance, while the Investment Law framework has consolidated and simplified the treatment of investors. MISA continues to digitise registration through its portal (Source: MISA, https://misa.gov.sa/). The practical effect for buyers is twofold: more transactions now qualify for streamlined investment registration, but a wide range of sectors and control changes still sit within the perimeter of one or more sectoral or prudential regulators. The net result is often more parallel filings, not fewer.

Quick decision map, who to notify and when

Before drafting, run every cross‑border deal through this three‑point flow:

1. Is the acquirer foreign? If yes, MISA investment approval and registration will usually be engaged, and the target’s sector should be checked against any excluded/restricted activities.
2. Does the target hold a regulated licence? If the target is a bank, insurer, payment provider or fintech licensed by SAMA, change‑of‑control consent is required. If it is listed, CMA rules apply. If it operates in telecom, health, energy or defence, the relevant sectoral regulator must consent.
3. Does the deal raise competition concerns? If the parties meet GAC thresholds, an economic concentration notification is mandatory before completion.

Answering these three questions produces the list of filings you must plan, sequence and fund. Everything that follows explains how to execute each one.

When do you need M&A regulatory approvals in Saudi Arabia?

Determining whether M&A regulatory approvals Saudi Arabia rules bite is a question of statutory triggers, deal structure and the identity of the acquirer. The core drivers are the nationality of the buyer, whether the transaction transfers control of a licensed entity, whether the target sits in a restricted or excluded activity, and whether competition thresholds are met. Treat each as an independent gate: a deal can pass one and be blocked by another.

Share versus asset purchase: approval consequences

Structure changes the approval profile materially. A share acquisition transfers the licences, contracts and regulatory standing of the target intact, which usually means change‑of‑control consent from any prudential or sectoral regulator that licenses the target. An asset purchase, by contrast, may require the buyer to obtain fresh licences in its own name rather than inherit the seller’s, and it can shift the timing burden onto the acquirer’s own qualification process. For regulated targets, a share deal is often faster because it relies on a control‑change review rather than a fresh licensing application; for lightly regulated targets in restricted sectors, an asset deal can sometimes alter foreign‑ownership analysis.

The correct choice is deal‑specific, but it should be made with the approvals map in hand, not after.

Regulated industries that typically require consent

Some acquisitions cannot close without a specific regulator’s sign‑off, regardless of competition thresholds:

• Financial services. Banks, insurers, reinsurers, payment service providers, exchanges and fintechs licensed by SAMA or the CMA.
• Telecommunications and IT. Holders of communications and IT licences.
• Healthcare and pharmaceuticals. Licensed providers, distributors and manufacturers.
• Energy and utilities. Licensed operators and entities involving national champions.
• Defence and dual‑use. Any target with defence, security or dual‑use exposure.

Common mis‑triggers and how to avoid them

Two errors recur. The first is assuming an intra‑group reorganisation escapes review, a change in ultimate beneficial ownership can still constitute a control change for SAMA or a notifiable concentration for GAC. The second is treating a minority investment as approval‑free; where the minority stake confers negative control rights, veto powers or board influence, it can trigger both investment and competition review. Screen for beneficial ownership and control rights, not just headline percentages.

The key regulators: roles, thresholds and practical triggers

Cross‑border deals typically engage up to five authorities. SAMA supervises the financial sector and must consent to control changes in the entities it licenses (Source: SAMA, https://www.sama.gov.sa/). MISA administers foreign investment approvals and registration (Source: MISA, https://misa.gov.sa/). GAC enforces merger control and clears economic concentrations (Source: GAC, https://www.gac.gov.sa/). The CMA governs public M&A and listed‑company transactions (Source: CMA, https://cma.org.sa/). Sectoral regulators licence and supervise telecom, health, energy and defence activity. The table below is the centrepiece reference for planning M&A regulatory approvals Saudi Arabia clearance. Timelines shown are indicative estimates only; confirm current statutory periods with each authority.

Side‑by‑side comparison: SAMA vs MISA vs GAC vs sectoral regulators vs CMA

Typical conditions and precedents

Regulators rarely refuse a well‑structured deal outright; they often condition it. SAMA applies fit‑and‑proper vetting to incoming controllers, may require additional capital, and can expect meaningful local board representation and a documented remediation plan where the target has legacy compliance issues. GAC’s toolbox runs from behavioural undertakings, supply commitments, non‑discrimination, information firewalls, through to structural divestitures where horizontal overlap is severe. Sectoral regulators may overlay security vetting and national‑interest commitments, particularly in defence and critical infrastructure. The practical lesson is that your SPA must anticipate conditional approval: build in mechanics that let the deal proceed while a condition is satisfied, rather than assuming a binary approve/refuse outcome.

Merger control and competition clearance (GAC): thresholds, timing and strategies

Merger control is the approval most often underestimated in cross‑border planning. GAC reviews economic concentrations that meet notification thresholds or that may substantially lessen competition, and clearance is a genuine condition to lawful completion (Source: GAC, https://www.gac.gov.sa/). Because the review can extend into a further phase with remedies, it frequently sits on the critical path of the whole M&A regulatory approvals Saudi Arabia timetable.

Filing thresholds and exemptions

Notification is triggered where the combined turnover of the parties meets the prescribed threshold set under the Competition Law and its Implementing Regulations, or where the transaction otherwise raises competition concerns. Because thresholds and methodology are updated by GAC from time to time, confirm the current figures directly with GAC before concluding a deal is not notifiable. Buyers should test the combined position on a market‑by‑market basis: even a modest Saudi target can be notifiable if the acquirer already has a strong domestic footprint in the same market. Intra‑group restructurings and transactions falling below the threshold may be exempt, but the burden is on the parties to document why.

Where there is genuine doubt, notify, the cost of a filing is far lower than the cost of an unwound transaction.

Timeline and pre‑filing options

GAC review is phased, with an initial statutory review period and the possibility of an extended phase where the transaction raises overlap concerns and remedies must be negotiated. Confirm the current review periods with GAC when planning. Early, informal pre‑filing engagement is one of the most effective ways to compress the timeline: it lets the parties test theories of harm and shape remedies before the formal clock starts running.

Tactical drafting: remedies and hold‑separate clauses

Where remedies are foreseeable, draft for them. Include a covenant obliging the buyer to offer proportionate remedies up to an agreed ceiling, a hold‑separate obligation to keep the target operationally independent pending clearance, and a longstop date that accounts for a full extended review. Allocate who bears the commercial cost of a divestiture remedy, this is a negotiable lever, not a foregone conclusion.

National security, defence and sensitive‑sector clearances

Deals touching defence, dual‑use technology or critical national infrastructure attract heightened, interagency scrutiny. Defence and security remain a strategic national priority for the Kingdom, and buyers should expect national‑interest considerations to shape both the timeline and the conditions attached to any clearance.

Defence and dual‑use: practical filing checklist

• Identify at diligence whether the target holds defence, security or dual‑use licences, contracts or export authorisations.
• Map the ultimate beneficial ownership and control chain of the acquirer, including any foreign‑state links.
• Prepare a national‑interest narrative explaining the deal’s benefit to the Kingdom’s industrial capability.
• Anticipate security vetting of incoming controllers, directors and senior managers.
• Plan for coordination between the relevant ministries, the General Authority for Military Industries (GAMI) where applicable, and the sectoral regulator.

Handling classified information in deals

Sensitive‑sector diligence often involves classified or restricted material. Establish clean teams, physical and electronic data‑room segregation, and redaction protocols before information exchange begins. Where the buyer cannot lawfully see certain material pre‑closing, use post‑closing verification mechanisms and specific indemnities rather than forcing disclosure that breaches security rules.

SPA protective language for national security probes

Include a condition precedent tied to national‑security clearance, a cooperation covenant requiring both parties to respond promptly to interagency requests, and a termination right if clearance is refused or is granted only on terms that fundamentally alter deal economics. Give the buyer the right to walk away without penalty where mandated conditions exceed an agreed materiality threshold.

SAMA approvals: banks, insurers, fintech and financial services

Where the target holds a financial licence, SAMA consent to the change of control is mandatory and cannot be waived by the parties (Source: SAMA, https://www.sama.gov.sa/). SAMA’s review focuses on the suitability of the incoming controller, the stability of the licensed entity and the protection of customers. Review windows vary with the complexity of the application and the completeness of the file, so a SAMA filing usually anchors the deal timetable. Our deeper treatment of financial‑sector clearance is set out in how to get SAMA approval for fintech acquisitions.

SAMA documentary checklist

• Application form and cover letter setting out the transaction and rationale.
• Full ownership and control chain of the acquirer, with beneficial owners identified.
• Fit‑and‑proper questionnaires for proposed controllers, directors and senior management.
• Audited financials of the acquirer and evidence of financial standing.
• Business plan for the target, including capital, governance and compliance arrangements.
• Details of any proposed board and management changes post‑closing.

Efficient processing and precedent examples

SAMA has shown willingness to process well‑prepared applications efficiently, particularly for fintech and payment providers aligned with the Kingdom’s digital‑finance agenda. The buyers who move fastest are those who pre‑engage, submit complete files, and present credible, experienced controllers. Incomplete fit‑and‑proper packs are among the most common causes of delay; assemble them before, not after, signing.

Negotiating conditional consents and escrow mechanics

SAMA may grant consent subject to conditions, capital injection, remediation of legacy issues, or specific governance changes. Reflect this in the SPA with a portion of consideration held in escrow pending satisfaction of post‑closing conditions, and a clear allocation of who funds any required capital top‑up. A trustee or escrow structure lets completion proceed while protecting the buyer against unremediated conditions.

MISA (Ministry of Investment) approvals: the foreign direct investment route

For a foreign acquirer, MISA approval and investment registration are the gateway to holding the target lawfully. MISA administers the investment route through its portal, distinguishing between activities that qualify for streamlined registration and those that are restricted or excluded and face special conditions or require additional approvals (Source: MISA, https://misa.gov.sa/). Getting the MISA classification right at the outset determines whether the foreign investment approval Saudi timeline is measured in weeks or months.

Restricted/excluded activities and sectoral overlaps

Certain activities are excluded from foreign investment or subject to ownership ceilings and special conditions. Because a single target can be both a restricted‑activity entity and a licensed financial or telecom business, MISA classification frequently overlaps with sectoral and prudential review. Confirm the target’s precise licensed activities against the current position published by MISA, and coordinate the MISA filing with any sectoral consent so that conditions imposed by one regulator do not conflict with another.

MISA timeline and practical tips

Straightforward investment registrations can complete within a few weeks, while restricted activities or reviews requiring additional approvals can take considerably longer. Submit a complete application, align the proposed activity codes with the target’s actual operations, and pre‑clear any local‑partner or ownership‑ceiling requirements before signing.

SPA clauses: pre‑conditions and covenants

Make MISA approval a condition precedent, impose a best‑efforts covenant on the buyer to pursue registration diligently, and provide for post‑closing licence registration steps. Where a local partner is required, address the partnership terms in the transaction documents rather than deferring them.

Sectoral regulators (telecom, defence, healthcare, energy): targeted checklists

Sector regulators add specialised layers to the M&A regulatory approvals Saudi Arabia process, each with its own filings, timelines and conditions. Plan them in parallel with the horizontal approvals above.

Telecom (Communications, Space & Technology Commission, CST)

• When required. Transfer of control of a licensed telecom or IT operator.
• Typical filings. Change‑of‑control notification, ownership disclosures, technical and financial fitness evidence.
• Timing and conditions. Several weeks to a few months; conditions may address service continuity, security and licence compliance.

Healthcare and pharmaceuticals (Ministry of Health; SFDA for products)

• When required. Acquisition of licensed providers, distributors or manufacturers.
• Typical filings. Licence transfer or re‑issuance applications, quality and accreditation evidence; product authorisations via the Saudi Food and Drug Authority (SFDA) where relevant.
• Timing and conditions. Weeks to months; conditions focus on continuity of care, quality standards and product authorisations.

Energy and utilities (Ministry of Energy)

• When required. Control changes in licensed energy or utility operators, or deals involving national champions.
• Typical filings. Ministerial approval, licence transfer, national‑interest documentation.
• Timing and conditions. Often extended where strategic assets are involved; expect national‑interest commitments.

Practical cross‑referral issues

Sectoral regulators frequently coordinate with MISA, SAMA and GAC. Sequence filings so that conditions imposed by one authority are visible to the others, and avoid submitting inconsistent representations across parallel applications.

Timing, costs and risk allocation in transaction documents

Approval risk is a value and timing risk, and the SPA is where it is priced and allocated. A disciplined approach converts regulatory uncertainty into defined, negotiable obligations.

Typical timelines and milestones

Build a combined calendar covering pre‑notification engagement, formal filing, response to information requests and final decision for each regulator. SAMA and GAC reviews generally set the longstop on complex deals; MISA and sectoral filings often run in parallel. The critical‑path filing should drive the longstop date in the SPA, with a buffer for information requests and remedy negotiation.

Cost ranges and who pays

Cost items include regulatory filing fees (as set by each authority), external counsel and economic‑advisory fees for competition filings, and the commercial cost of any undertakings given to regulators. Market practice on allocation is negotiable: buyers typically bear filing fees and their own advisory costs, but the cost of remedies, capital top‑ups or divestitures is a genuine bargaining point that should be settled expressly rather than left to a general indemnity.

SPA clauses: conditionality and termination triggers

Tie each material approval to a specific condition precedent, set a realistic longstop, and define termination rights where a condition is refused or granted on unacceptable terms. Distinguish “hell‑or‑high‑water” obligations from best‑efforts covenants, the difference determines who carries the risk that a regulator demands more than the buyer will accept.

Practical pre‑closing approvals checklist and model SPA language

Use the following checklist to structure the clearance workstream, and adapt the model clauses to the deal’s specific approval profile.

• Confirm acquirer nationality and MISA/investment classification.
• Identify all licensed activities of the target (SAMA, CMA, telecom, health, energy, defence).
• Test GAC turnover thresholds on a per‑market basis against the current figures published by GAC.
• Screen for national‑security and dual‑use exposure.
• Assemble fit‑and‑proper packs and beneficial‑ownership evidence early.
• Sequence filings and set the longstop off the critical‑path approval.
• Draft conditions precedent, cooperation covenants and remedy caps.
• Agree escrow and cost‑allocation mechanics for conditional consents.

Model clause snippets

• Condition precedent. “Completion is conditional on receipt of all Required Approvals (including SAMA, MISA, GAC and any Sectoral Consent) in form and substance reasonably satisfactory to the Buyer.”
• Regulatory cooperation covenant. “Each party shall use best efforts to obtain the Required Approvals as promptly as practicable, and shall provide all information reasonably requested by any Authority without undue delay.”
• Remedy cap. “The Buyer shall not be required to accept any remedy, undertaking or condition that, individually or in aggregate, exceeds the Agreed Materiality Threshold.”
• Break trigger. “Either party may terminate if any Required Approval is refused, or the Longstop Date passes without all Required Approvals having been obtained.”

Negotiation tips

Take a clear position on the efforts standard early, buyers should resist an unqualified hell‑or‑high‑water covenant unless remedy risk is genuinely remote, while sellers should push for one where clearance is the buyer’s principal execution risk. Where SAMA or GAC conditions are foreseeable, negotiate the cost split and escrow before signing, not after a condition lands. Keep the longstop realistic; an over‑tight date simply hands the counterparty a costless walk‑away.

Post‑closing filings, ongoing compliance and penalties

Clearance is not the end of the process. Completing the regulatory workstream correctly protects the transaction from later challenge and preserves the target’s licences.

Notifications and registry updates

Immediately after closing, update the commercial register with the Ministry of Commerce, reflect the new ownership and management in the target’s licences, and complete MISA investment registration steps. File any post‑closing confirmations required by SAMA or sectoral regulators, and ensure Saudi Exchange (Tadawul) and CMA notifications are made where a listed entity is involved.

Penalties and mitigation steps

Failing to obtain a required consent or completing before clearance can expose the parties to fines, licence suspension and, in the most serious cases, unwinding of the transaction. Non‑compliance with post‑closing conditions can trigger enforcement against the licensed entity itself. Mitigate by maintaining a compliance calendar of ongoing reporting obligations, documenting satisfaction of every regulator condition, and retaining evidence of each approval. Where a gap is discovered, engage the relevant authority proactively rather than waiting for enforcement, voluntary disclosure is generally treated more favourably.

Comparison table: quick reference (SAMA / MISA / GAC / sectoral)

Decision framework: choosing your path and negotiation levers

Do not sequence filings by habit. Choose the lead regulator by where refusal risk and timeline pressure are greatest:

• Choose MISA‑first when the investor is foreign and the target sits in a restricted activity or requires investment registration, the classification affects everything downstream.
• Choose SAMA‑first when the target holds a SAMA licence, because fit‑and‑proper vetting is often the longest and least compressible track.
• Choose GAC‑first when the deal involves significant competitors or high concentration; begin pre‑filing engagement before signing.
• Choose a sectoral regulator‑first when defence, telecom, energy or health licences carry the deal’s value and their consent is a genuine gating item.
• Choose pre‑notification whenever complex remedies or national‑security review are likely, early dialogue buys time and shapes conditions in your favour.

On negotiation levers, our position is firm: allocate remedy cost and efforts standards expressly, escrow against conditional consents, and set the longstop off the true critical path. Deals fail on regulatory risk when these levers are left generic. For structuring support, see our commercial lawyers, Saudi Arabia practice.

Next steps

M&A regulatory approvals Saudi Arabia planning rewards early, deliberate sequencing and precise SPA drafting, map every triggered consent at term sheet, choose your lead regulator by refusal and timeline risk, and allocate remedy cost before signing. This article is general guidance, not legal advice; obtain bespoke advice for your transaction. Contact Global Law Experts for jurisdictional intake and an approvals project plan tailored to your deal.

Sources

1. Ministry of Investment of Saudi Arabia (MISA)
2. Saudi Central Bank (SAMA)
3. General Authority for Competition (GAC)
4. Capital Market Authority (CMA)
5. Ministry of Finance (MOF)