M&A Lawyers Saudi Arabia 2026: UBO Disclosure, CMA Foreign‑investor Rules & Transaction Risks

Two regulatory changes that took effect in early 2026 have fundamentally altered the compliance landscape for M&A lawyers in Saudi Arabia and the acquirers they advise. The Ministry of Commerce (MoC) published new Ultimate Beneficial Owner (UBO) rules that became effective on 4 January 2026, requiring every Saudi entity to maintain a beneficial ownership register, file data through the Saudi Business Center (SBC) and notify changes within 15 days. Separately, the Capital Market Authority (CMA) opened the Saudi Main Market (Tadawul) to all categories of foreign investors effective 1 February 2026, dismantling the former Qualified Foreign Investor (QFI) framework.

Together, these reforms reshape due diligence workflows, deal documentation and closing timetables, and any transaction signed without accounting for them carries material regulatory risk.

Executive TL;DR, What Every Acquirer Must Know

Before reading the full playbook, transaction teams should note six immediate compliance actions triggered by the 2026 changes:

• Confirm the target’s UBO register. Every Saudi entity, joint stock company, LLC, branch, must now maintain a UBO register at its head office. Buyers should request a certified copy as a Day‑1 due diligence item and verify its accuracy against SBC filings.
• Adjust due diligence scope. Standard M&A due diligence in Saudi Arabia now requires verification of beneficial ownership disclosure down to natural persons who hold 25 % or more of ownership (or exercise effective control by any means), sanctions screening of each identified UBO and cross‑referencing with the SAMA Wathq verification service.
• Update reps, warranties and disclosure letters. Sellers must warrant the accuracy and completeness of UBO data. Buyers should insist on specific indemnities for losses arising from undisclosed or inaccurate beneficial ownership.
• File post‑closing UBO updates with MoC via SBC within 15 days. Any change of control, including a share transfer on closing, triggers a mandatory SBC filing within 15 calendar days. Missing this deadline exposes the company and its directors to administrative penalties.
• Check CMA/Tadawul limits for foreign bidders. While the QFI regime has been removed, foreign investors acquiring large holdings in listed companies must still comply with notification thresholds and remaining ownership caps under the amended Rules for Foreign Investment in Securities (FIS Rules).
• Run Shari’ah screening where relevant. For Shari’ah‑compliant transactions, acquirers should screen target activities, financing structures and counterparty exposures before signing, UBO data may reveal previously hidden exposures to non‑compliant sectors.

In short: the 2026 reforms add mandatory UBO verification steps, tighter filing deadlines and broader foreign‑investor access to every Saudi M&A transaction. Deals that proceed on pre‑2026 assumptions risk regulatory penalties, delayed closings and post‑acquisition liability.

Snapshot Timeline, Key 2025–2026 Dates and Deadlines

Companies Law 2026 & CMA Amendments, Scope and Legal Mechanism

The two pillars of the 2026 reforms operate through separate but complementary instruments. Understanding which regulator issued what, and where enforcement sits, is critical for M&A lawyers in Saudi Arabia advising on deal structure and risk allocation.

Legal Basis and Ministerial Decisions

The UBO disclosure regime derives from the Companies Law and associated ministerial decisions issued by the MoC. The Ministerial Decision published on 26 November 2025 (effective 4 January 2026) establishes the obligation for all companies registered in Saudi Arabia to identify their ultimate beneficial owners, defined as natural persons who, directly or indirectly, own 25 % or more of the entity’s share capital or exercise effective control through other means. The Decision mandates maintenance of a UBO register at the company’s registered head office, electronic filing through the SBC platform and notification of any change within 15 calendar days.

The CMA amendments to the FIS Rules were announced by the CMA Board on 6 January 2026 and became operative on 1 February 2026. These amendments removed the QFI categorisation requirement, opened the Tadawul Main Market to all categories of foreign investors and revised the applicable ownership‑limit framework. The practical effect is that non‑resident investors may now open investment accounts with Saudi‑authorised custodians and trade directly, subject to the remaining notification thresholds for significant holdings.

Enforcement and Penalties

Enforcement of UBO obligations sits with the MoC. Administrative fines may be imposed on the company and, where the breach involves wilful non‑compliance or inaccurate filings, on individual directors and managers. The Companies Law 2026 provides for escalating penalties, including potential suspension of certain commercial registrations for persistent violations. Industry observers expect the MoC to take an active enforcement stance given the Kingdom’s commitments under the Financial Action Task Force (FATF) mutual evaluation process.

CMA enforcement of the FIS Rules is handled separately. Violations of foreign‑ownership notification requirements or exceeding prescribed caps can result in CMA‑imposed fines, forced divestiture orders and, in serious cases, referral for criminal prosecution. For acquirers of listed companies, the practical risk is that a failure to notify a significant holding within the prescribed timeframe may stall, or unwind, a public M&A transaction.

How M&A Lawyers in Saudi Arabia Advise on UBO Disclosure, Practical Playbook

The UBO disclosure rules apply to every Saudi‑registered entity. For M&A purposes, both target companies (sell‑side) and acquiring vehicles (buy‑side) must comply. The playbook below addresses who must file, what data is required and when filings must be made.

How to Identify UBOs in Complex Structures

A UBO is any natural person who ultimately owns or controls the entity. The 25 % ownership threshold is traced through the entire chain of corporate ownership. Where no natural person holds 25 % directly or indirectly, the rules require identification of persons who exercise effective control by other means, for example, through shareholder agreements, board‑appointment rights or veto powers over key decisions. In multi‑layered structures common in private‑equity‑backed acquisitions, each intermediate holding entity must be “looked through” until a natural person is identified.

Where a company genuinely cannot identify a 25 %‑plus owner or controller, the rules require identification of the senior managing official (e.g. the CEO or managing director) as the reportable person. This fallback position should be treated as a last resort, not a compliance shortcut.

What to File, Required Data Fields

The UBO register and SBC filing must include, for each identified beneficial owner:

• Full legal name and any known aliases
• Nationality and national identification or passport number
• Date and place of birth
• Residential address (current)
• Nature and extent of beneficial interest, percentage of ownership, voting rights or description of control mechanism
• Date on which UBO status was acquired
• Supporting documentation, certified copies of identification documents and, where applicable, corporate structure charts demonstrating the ownership chain

When to File and Re‑file

There are three critical timing obligations:

1. Initial filing: companies existing at the effective date (4 January 2026) must establish a register and submit data via SBC. Newly incorporated entities must file as part of the incorporation process.
2. Change notification: any change to UBO information, including as a result of an M&A closing, must be notified to MoC via SBC within 15 calendar days of the company becoming aware of the change.
3. Annual confirmation: companies must confirm or update the accuracy of all UBO data at least once per year.

The following table summarises UBO reporting obligations by entity type, a reference M&A lawyers in Saudi Arabia should keep on every deal checklist:

M&A Due Diligence & Transactional Consequences, Warranties, Reps and Disclosure Letters

The introduction of mandatory UBO disclosure has direct, measurable consequences for M&A due diligence in Saudi Arabia. Transaction teams must now expand their document‑request lists, revise standard representations and warranties and rethink disclosure‑letter drafting, or accept post‑closing liability that did not exist before January 2026.

How Buyers Should Scope Due Diligence

Buyers should add the following items to their standard M&A due diligence Saudi checklist:

• Certified copy of the target’s UBO register, including all historical entries and amendments since 4 January 2026
• Evidence of SBC filings, stamped or system‑generated confirmation that the target has submitted its UBO data on time
• Wathq verification results, where the target holds bank accounts or interacts with SAMA‑regulated financial institutions, request evidence that the Wathq verification service has been integrated and that no discrepancies have been flagged
• Shareholder agreements, side letters and nominee arrangements, any instrument that could confer effective control or voting rights beyond direct ownership must be disclosed and assessed against the 25 % threshold
• Sanctions and PEP screening of all identified UBOs, including cross‑referencing against Saudi, UN, OFAC and EU sanctions lists
• CMA and foreign‑ownership compliance, for listed targets, verify that foreign investor rules Saudi have been complied with and that no ownership‑cap breaches exist

Sample UBO Representations and Seller Covenants

The transactional disclosure requirements now demand explicit UBO‑focused provisions in share‑purchase agreements. The following illustrates representative drafting language:

“The Seller represents and warrants that (a) the Company maintains a complete and accurate register of ultimate beneficial owners in compliance with the Ministerial Decision of the MoC effective 4 January 2026; (b) all filings required to be made with the MoC via the Saudi Business Center in respect of UBO information have been made within the prescribed timeframes and are accurate in all material respects; (c) no UBO of the Company is a Sanctioned Person or a Politically Exposed Person that has not been disclosed to the Buyer in the Disclosure Letter; and (d) no change to UBO information has occurred since the date of the most recent SBC filing that has not been notified to the Buyer in writing.

Sellers should covenant to maintain the UBO register accurately through closing and to notify the buyer immediately of any change. Buyers should negotiate a specific indemnity, uncapped or subject to a meaningful cap, covering losses arising from any breach of UBO representations, including regulatory fines, forced remediation costs and third‑party claims.

For detailed guidance on how disclosure letters function in M&A transactions generally, see our guide on why disclosure letters are crucial in M&A deals.

CMA Foreign‑Investor Rules & Tadawul Opening, M&A and Financing Implications

The CMA’s decision to open the Saudi Main Market to all categories of foreign investors, effective 1 February 2026, represents the most significant liberalisation of the foreign investor rules Saudi capital markets have seen since the initial QFI framework was introduced in 2015. The amended FIS Rules remove the requirement for foreign investors to register as QFIs before trading on Tadawul.

What Changed, QFI Removal Explained

Under the prior regime, non‑resident foreign investors needed to apply for, and maintain, QFI status through a CMA‑authorised person. The CMA amendments 2026 eliminated this category entirely. Foreign investors may now open investment accounts directly through Saudi‑authorised custodian banks and trade on the Main Market without prior CMA qualification. This applies to institutional investors, corporate acquirers and, significantly, high‑net‑worth individuals.

However, certain safeguards remain. Notification obligations apply when a foreign investor’s holdings in a single listed company reach certain thresholds. Strategic investor restrictions may also apply where a foreign acquirer seeks to acquire a controlling stake or exceed sector‑specific ownership limits. Early indications suggest the CMA will continue to monitor large foreign holdings through its existing significant‑ownership disclosure framework.

Public M&A Mechanics and Practical Steps for Bidders

For public M&A transactions, including tender offers and negotiated share purchases of listed companies, the Tadawul foreign access reforms have several practical implications:

• Deal financing: foreign bidders can now fund acquisitions through direct capital injections into Saudi custodian accounts rather than routing through swap structures or nominee arrangements. The likely practical effect will be lower transaction costs and faster settlement.
• Ownership‑cap compliance: bidders must verify that the proposed acquisition, when aggregated with existing foreign holdings in the target, does not breach any applicable cap. The CMA FIS Rules FAQ provides guidance on how aggregate foreign ownership is calculated.
• Mandatory offer thresholds: foreign acquirers triggering mandatory‑offer thresholds under the Merger and Acquisition Regulations must follow the same CMA notification and offer procedures as domestic bidders.
• Settlement and custodian appointment: foreign buyers must appoint a CMA‑authorised custodian and ensure that their custodian can process settlement within the standard T+2 cycle on Tadawul.

For background on foreign ownership of Saudi companies more broadly, our guide on whether foreigners can own 100 % of a company in Saudi provides useful context.

Deal Timetable, Filings & Risk Checklist

The following action matrix maps each deal stage to the specific UBO, Companies Law 2026 and CMA obligations that must be addressed. Transaction teams should use this as a living checklist from LOI through post‑closing integration.

Penalties snapshot: failure to maintain the UBO register or to notify changes within 15 days exposes the company to administrative fines imposed by the MoC. Persistent or wilful non‑compliance can result in escalating penalties, including suspension of commercial registrations. Directors and managers who knowingly file inaccurate UBO information may face personal liability. For CMA violations related to foreign‑ownership caps or notification failures, fines and forced divestiture orders are the primary enforcement tools.

Shari’ah Considerations, Sanctions Screening & Third‑Party Risks

For acquirers executing Shari’ah‑compliant transactions, including those involving Islamic financing structures, sukuk or Shari’ah‑governed investment funds, the UBO disclosure regime introduces additional screening obligations. Identifying the natural persons behind target entities may reveal exposures to non‑compliant activities (e.g. conventional interest‑bearing lending, alcohol or gambling revenues) that were previously obscured by layered corporate structures. Shari’ah boards and advisors should review UBO data as part of their compliance opinion process.

Wathq Integration and Financial Institution Obligations

SAMA requires all financial institutions under its supervision to integrate with the “Wathq” service for verifying the identity of ultimate beneficial owners. In the context of an M&A transaction, this means that a buyer’s bank, the target’s bank and any financing institution involved in the deal will independently verify UBO data against the MoC/SBC records. Discrepancies, such as a UBO identified in the company register who does not appear in the Wathq database, or vice versa, can trigger freezing of accounts, delays in fund transfers and mandatory reporting to SAMA and the Saudi Financial Intelligence Unit.

Transaction teams should build a Wathq verification step into the pre‑closing timeline and ensure that the target’s banking relationships are not at risk of disruption during the transition period. For acquirers establishing an LLC in Saudi Arabia as a holding vehicle, early engagement with the chosen bank on Wathq compliance is essential.

Sample 90‑Day Deal Timetable, From LOI to Close

The following illustrative timetable incorporates the 2026 UBO and CMA requirements into a standard private M&A transaction. Timings will vary depending on deal complexity, regulatory approvals required and whether the target is listed or private.

1. Weeks 1–2 (LOI and preliminary steps): Execute LOI; request target UBO register, SBC filings and corporate documents; engage custodian (if listed target). Signoff: deal lead + buyer’s counsel.
2. Weeks 3–6 (due diligence): Full legal, financial and tax due diligence including UBO verification, Wathq confirmation, sanctions/PEP screening and CMA foreign‑ownership analysis. Signoff: DD workstream leads.
3. Weeks 7–8 (SPA negotiation): Draft and negotiate SPA with UBO reps/warranties, indemnities and disclosure letter. Agree escrow mechanics for UBO‑related claims. Signoff: both parties’ counsel.
4. Week 9 (signing): Execute SPA; seller delivers UBO compliance certificate and disclosure letter. File CMA notification if applicable. Signoff: authorised signatories.
5. Weeks 10–11 (pre‑close conditions): Satisfy conditions precedent including any CMA, SAMA or competition‑authority approvals. Target updates UBO register to reflect anticipated closing. Signoff: regulatory counsel.
6. Week 12 (closing): Transfer shares/interests; update UBO register on closing date; commence 15‑day SBC filing countdown. Signoff: both parties’ counsel + finance.
7. Week 13+ (post‑close): File updated UBO data via SBC (within 15 days); notify CMA of significant‑holdings change (listed targets); integrate target into buyer’s compliance framework. Signoff: buyer’s compliance + target management.

Building in buffer days at the pre‑close and post‑close stages is advisable. Industry observers expect that MoC and CMA processing times may be extended in the first year of the new regime as regulators and companies adjust to the systems. For buyers setting up new Saudi entities as acquisition vehicles, our guides on setting up a tech company in Saudi Arabia and setting up an F&B company in Saudi Arabia cover entity‑formation considerations relevant to this timetable.

Conclusion

The 2026 UBO disclosure rules and CMA foreign‑investor amendments have created a new compliance baseline for every M&A transaction in the Kingdom. For M&A lawyers in Saudi Arabia, the practical imperative is clear: expand due diligence to cover beneficial ownership verification, draft explicit UBO representations and indemnities, build SBC filing deadlines into closing mechanics and advise foreign acquirers on the opportunities, and remaining limits, created by the Tadawul opening. Deals that adapt to this framework will close faster and with materially lower post‑acquisition risk.

Sources

1. Capital Market Authority (CMA), Opening the Capital Market to All Categories of Foreign Investors
2. CMA, Frequently Asked Questions on the Rules for Foreign Investment in Securities
3. BCLP, Saudi Arabia: New Ultimate Beneficial Owner (UBO) Rules Issued
4. SAMA, Technical Integration: Wathq Service for Verifying Identity of Ultimate Beneficial Owner
5. Argaam, Saudi Arabia Opens Market to Foreign Investors
6. Baker McKenzie, Saudi Arabia: The Evolution of Capital Markets Continues to Accelerate
7. Dentons, Opening the Market: Saudi Arabia’s Amended Foreign Ownership Rules Come into Effect