Buying a Company in Saudi Arabia (2026): When CMA, MISA and Merger‑control Approvals Are Required

Buying a company Saudi Arabia investors are eyeing in 2026 rarely fails on price, it fails on unclear regulatory clearance. Under the current Companies Law and the wider Vision 2030 investment reforms, an inbound acquisition can trigger up to four distinct approval streams: a Ministry of Investment (MISA) foreign investor licence, a Capital Market Authority (CMA) clearance for listed targets, a merger‑control notification to the General Authority for Competition (GAC), and sector‑specific or national‑security sign‑offs. Getting the sequencing wrong costs weeks, sometimes months, and can force a deal to be unwound. This guide takes a clear position on when each approval bites, how long it takes, and what deal counsel must prepare before signing.

Last updated: 2026. This is a decision guide, not a hedge, where the answer is “yes, notify,” we say so. Verify all thresholds, fees and procedures against current regulator guidance before you act.

Executive decision roadmap for buying a company Saudi Arabia

Before you draft a letter of intent, run the transaction through four yes/no gates. Each gate maps to a regulator and a filing. Treat any “yes” as a condition precedent unless your Saudi counsel confirms otherwise in writing.

Quick decision checklist

1. Is the buyer foreign (non‑GCC or otherwise outside domestic ownership rules)? If yes, a MISA foreign investor licence is almost certainly required before you can register the acquisition. Note that certain GCC investors may benefit from national treatment in defined circumstances.
2. Is the target listed on Tadawul, or does it hold securities within the CMA’s remit? If yes, CMA disclosure and potentially a mandatory offer are engaged.
3. Does the combined turnover or market position cross GAC thresholds? If yes, merger control is mandatory and suspensory, you cannot close before clearance.
4. Does the target operate in a regulated sector (banking, telecoms, energy, healthcare, defence) or hold critical infrastructure? If yes, expect a sectoral regulator and possibly a national‑security review.

Our recommendation: assume all four gates apply until diligence proves otherwise. It is cheaper to clear a gate you did not strictly need than to discover a missed filing after signing.

Key documents to prepare pre‑LOI

• Corporate structure chart. Buyer and target, showing ultimate beneficial ownership and nationality of shareholders.
• Draft transaction summary. Percentage acquired, control implications, and consideration.
• Target activity list. Commercial registry activities and any licences held, the trigger for MISA and sectoral review.
• Turnover data. Combined Saudi and global turnover to test GAC notification thresholds.
• Board and shareholder resolutions. Authority to transact, required for every filing.

Summary comparison: MISA vs CMA vs merger control vs sectoral approvals

The table below is the heart of this guide. It sets the four approval streams side by side so deal teams can allocate responsibility and build a realistic timetable. Read it before you commit to a signing date. Timelines are indicative only and vary with sector, complexity and file completeness.

Practical drafting tips

• Sequence, do not parallel‑panic. MISA licensing and merger control can often run in parallel, but sectoral fit‑and‑proper reviews frequently depend on the buyer’s confirmed identity, start them once the MISA pathway is confirmed.
• Anchor the long‑stop date to the slowest gate. That is almost always the sectoral or national‑security review, not MISA.
• Build confidentiality into the timetable. CMA disclosure obligations and GAC filings can force public visibility earlier than a buyer expects.

Escalation to counsel

Escalate immediately if diligence reveals an unlicensed foreign shareholder, a target activity on a restricted list, or turnover figures near the GAC threshold. These are the three issues most likely to reset your timetable, and each needs a Saudi‑licensed lawyer’s judgement before you sign.

When MISA approval or a foreign investor licence is required

For most inbound deals, MISA is the first and non‑negotiable gate. If a foreign investor is acquiring equity or assets in a Saudi entity, the Ministry of Investment’s foreign investor licensing regime applies, and the acquisition generally cannot be registered at the commercial registry without it. Recent reforms have widened the range of activities open to foreign ownership and streamlined some licensing steps, but they have not removed the licence requirement itself. Buying a company Saudi Arabia authorities treat as foreign‑controlled still means securing MISA clearance before completion.

What MISA looks at

MISA’s review is substantive, not a rubber stamp. Expect scrutiny of:

• The investment plan. What the buyer intends to do with the target, capital commitment, and growth strategy.
• The activity classification. Certain strategic or restricted activities require additional conditions or remain closed to full foreign ownership.
• Saudisation and local participation. Employment and localisation commitments can be relevant to the licence assessment and to ongoing operations.
• Compliance and beneficial ownership. The identity and record of the ultimate owners, tested against integrity standards.

MISA procedural steps and timeline

The practical path runs from a pre‑application check of the target’s activities, through submission of the foreign investor application with supporting documents, to issuance of the licence and then registration of the transfer. In practice the timeline is driven almost entirely by document completeness and sector sensitivity. A clean file with a straightforward activity clears more quickly; a regulated activity or an incomplete business plan takes longer. Confirm current processing times directly with MISA when planning your schedule.

Practical examples and pre‑approval strategies

Consider a private equity sponsor acquiring a majority stake in a Saudi logistics company. Because the buyer is foreign and the activity is open, MISA licensing is required but generally efficient, start the application in parallel with diligence. Contrast that with a foreign buyer acquiring a company whose registry includes a restricted activity: here the recommendation is to obtain pre‑LOI written confirmation from MISA on whether the activity can be licensed at all, before spending on full diligence. The single most valuable step for any foreign investor acquisition Saudi deal is that early MISA confirmation, it tells you whether the deal is even possible in its current structure.

CMA approvals, listed targets and takeover regime

If the target is listed on Tadawul, the Capital Market Authority’s rules govern the acquisition in parallel with everything else. The CMA framework and the takeover regime introduce disclosure obligations and, above defined control thresholds, a mandatory offer to remaining shareholders. This is where buying a company Saudi Arabia listed markets contain moves from a private negotiation into a publicly regulated process with tight timing.

Public target checklist

• Confirm the target’s listing status and free‑float structure at the outset.
• Identify the disclosure thresholds that trigger notification to the market and the CMA as your stake builds.
• Test whether a mandatory offer is triggered once you cross the control threshold defined in the CMA’s Merger and Acquisition Regulations.
• Appoint a CMA‑authorised adviser, this is a practical requirement, not optional, for offer documentation.

Pre‑announcement considerations

The CMA regime penalises leaks and disorderly disclosure. Before any announcement, lock down your insider list, agree the disclosure timeline with your adviser, and prepare the offer document in draft. Statutory disclosure obligations are often short and time‑critical, while the CMA’s review of an offer document takes a number of weeks depending on the completeness of filings. Building the offer document while diligence is still running is the only way to hit an aggressive timetable.

Cross‑border offers and depositary receipts

Where the buyer is foreign, the CMA process runs alongside MISA licensing rather than replacing it, a listed‑target acquisition by an overseas investor needs both. If the consideration involves foreign securities or depositary receipts, factor in additional documentary and regulatory steps and start them early. The interplay with the Companies Law corporate‑action requirements means the CMA and Companies Law timelines must be reconciled in a single master schedule, not managed separately.

Merger control and competition clearance (2026): thresholds and process

Merger control Saudi Arabia rules are mandatory and suspensory. If a transaction (an “economic concentration”) meets the General Authority for Competition’s notification thresholds, based on combined turnover, you must notify and obtain clearance before closing. There is no discretion to skip this because the parties believe the deal is unproblematic. Our position is unambiguous: if you are near the thresholds, notify.

Voluntary vs mandatory notification

Saudi merger control is a mandatory notification regime for transactions crossing the GAC thresholds, it is not a voluntary system where parties choose to file. The only real judgement call is at the margins, where turnover figures sit close to the threshold. In those cases, the recommendation is to notify anyway or obtain a formal view from counsel, because the downside of failing to notify, fines and potential unwinding, dwarfs the cost of a precautionary filing. Confirm the current combined‑turnover threshold in the GAC’s implementing regulations, as it is periodically reviewed.

Documentary requirements

• Notification form completed to GAC specification.
• Market analysis defining the relevant markets and the parties’ shares.
• Competition assessment addressing any overlaps or vertical links.
• Supporting exhibits, financials, internal strategy documents and turnover data.

Pre‑notification meetings

Pre‑notification engagement with the GAC can materially speed review. Presenting a considered economic analysis and clearly defined markets before formal filing reduces the risk of the review stalling for want of information. The GAC conducts its review within the statutory period set by the Competition Law and its implementing regulations, which can be extended where the authority identifies competition concerns and may lead to conditions.

Examples of conditional clearances

Where a transaction raises concerns, clearance is not simply granted or refused, the GAC can impose remedies. These range from behavioural undertakings to structural divestments of overlapping business lines. For deal counsel, the practical implication is that a merger‑control risk assessment must feed directly into the SPA: who bears the cost and delay of remedies, and at what point either party can walk away.

Sectoral, national‑security and other regulator approvals

Beyond the three central gates, regulated sectors carry their own approvals, often the slowest and least predictable part of buying a company Saudi Arabia regulators classify as sensitive. Identify the relevant sector regulator in early diligence, because these reviews frequently determine the deal’s outer timetable.

Banking (SAMA) approvals

Acquisitions of banks, finance companies and other institutions supervised by the Saudi Central Bank (SAMA) require regulatory approval and fit‑and‑proper testing of the acquirer and its controllers. Ownership above defined thresholds triggers prior consent. These reviews are detailed and should be assumed to take longer than any other gate.

Telecoms and technology (CST) approvals

Transactions involving licensed telecommunications, IT and space operators fall within the remit of the Communications, Space and Technology Commission (CST). Change‑of‑control provisions in sector licences typically require regulator consent, and the buyer’s technical and financial suitability will be assessed.

Energy and utilities

Acquisitions in energy, utilities and related infrastructure engage the Ministry of Energy and associated regulators. Given the strategic nature of these assets, expect a substantive review and, in some cases, national‑interest considerations layered on top of ordinary licensing.

Defence and national‑security considerations

Where a target touches defence, critical infrastructure or sensitive technology, national‑security or strategic review can apply. These are the highest‑risk approvals: rejection is a real outcome, and criminal exposure may attach to non‑compliance in security‑sensitive cases. Treat any such target as requiring the earliest possible engagement with counsel and the relevant authorities.

Practical transaction checklist and timing

A disciplined timing matrix is what separates a clean completion from a stalled one. Map every “yes” from the decision roadmap to a regulator, a filing date and an owner, then reconcile them into one master schedule anchored to the slowest gate.

• Pre‑LOI diligence red flags: unlicensed foreign ownership, restricted activities, turnover near GAC thresholds, sector licences with change‑of‑control clauses.
• Timing matrix: list who notifies whom and by when, MISA and GAC often in parallel; CMA disclosure on its own tight clock; sectoral reviews staggered after buyer identity is confirmed.
• Regulatory risk allocation: decide in the SPA which party bears the cost and delay of clearances and remedies.
• Walkaway conditions: set clear failure triggers if a required approval is refused or unreasonably delayed.

SPA clauses to include

• Conditions precedent: completion conditional on MISA licence, CMA clearance, GAC clearance and each applicable sectoral approval.
• Long‑stop (drop‑dead) date: anchored to the slowest realistic clearance, with an extension mechanism for regulatory delay.
• Reverse break fee: where the buyer bears regulatory risk, protect the seller against a failed clearance.
• Regulatory covenants: obligations to file promptly, cooperate, share information and accept reasonable remedies.

Enforcement, penalties and remedies for non‑compliance

The consequences of skipping a required approval are severe and practical, not theoretical. Failing to obtain a MISA licence can block registration and unwind the transaction. Breaching CMA rules can force a mandatory offer or block the deal and attract penalties. Closing before merger clearance exposes the parties to fines and potential divestment remedies. In regulated sectors, non‑compliance can mean licence revocation and, in national‑security matters, criminal exposure. Beyond the legal sanction, the reputational and operational damage of a challenged deal follows the buyer into every future Saudi transaction. The clear lesson: clear first, close second.

Recommended deal workflow and counsel checklist

Our recommended workflow for inbound buyers, in order:

1. Structure and activity check. Confirm buyer nationality and target activities against foreign‑ownership rules.
2. MISA pre‑confirmation. Obtain a written view on the licence pathway before committing to diligence spend.
3. Threshold screening. Test GAC turnover thresholds and identify sector regulators.
4. Parallel filings. Launch MISA and merger‑control workstreams together; prepare CMA offer documentation if the target is listed.
5. Sectoral engagement. Start fit‑and‑proper and licence transfer processes once buyer identity is fixed.
6. SPA conditionality. Reflect every clearance as a condition precedent with a realistic long‑stop.

Escalate to senior Saudi counsel the moment a regulator requests confidentiality undertakings, raises a competition concern, or flags a fit‑and‑proper issue, these are inflection points that change the transaction’s risk profile.

Where to get help

Every acquisition is different, and the sequencing of MISA, CMA, merger‑control and sectoral approvals must be confirmed against the current regulator guidance and the Companies Law text before you commit. For tailored advice on buying a company Saudi Arabia deal teams are structuring in 2026, connect with a specialist through the Faisal A. Linjawy, GLE profile, or explore the Saudi Arabia corporate practice area via the GLE lawyer directory.

Sources

1. Ministry of Investment of Saudi Arabia (MISA)
2. Capital Market Authority (CMA)
3. General Authority for Competition (GAC)
4. Ministry of Commerce
5. Saudi Central Bank (SAMA)
6. Communications, Space and Technology Commission (CST)