The Dubai Financial Services Authority, on 25 June 2026, reported that it licensed and registered 182 firms in 2025, a 16 percent increase on 2024, bringing regulated entities to 1,050. Emirates News Agency carried the same counts the same day. The release also recorded Dubai in seventh place in the Global Financial Centres Index 39, published in March 2026. The 1,050 is a stock of regulated entities. The 182 is the new-license year. Neither figure is a count of open compliance seats, and adding them double-counts the firms that were already inside the 1,050 at year end.
GEN Rule 7.5.1, in the version in force from 1 July 2026, requires an Authorised Firm to have a Senior Executive Officer, a Finance Officer, a Compliance Officer and a Money Laundering Reporting Officer, each an Authorised Individual. A Credit Rating Agency need not appoint the Finance Officer or the MLRO. A firm whose only Financial Service is Managing a Venture Capital Fund need not appoint the Finance Officer. The Compliance Officer appointment remains in both exceptions. GEN Rule 7.4.6 defines that officer as a Director, Partner or Senior Manager responsible for compliance arrangements. The DFSA’s feedback statement on Consultation Paper 165 kept the Compliance Officer, the Finance Officer and the Senior Manager as Licensed Functions and set the revised rules for 1 July 2026. The proposal to replace those authorisations with a Designated Function was not adopted.
On 10 April 2026 the DFSA published a thematic review of compliance arrangements in fintech firms in the DIFC. Fifty-three percent of the firms in that review had three or fewer compliance staff. Nearly 58 percent outsourced the compliance function. Outsourcing does not remove GEN Rule 7.5.1. It changes the hire: some firms will keep an outsourced officer, and some will bring the Licensed Function inside after the review. A search brief has to say which of those it is before anyone is approached.
Outside the DIFC, VARA’s Compliance and Risk Management Rulebook, effective 19 June 2025, requires every licensed virtual-asset service provider to appoint a Compliance Officer with at least five years in a compliance function, approved by VARA as fit and proper, resident in the UAE or holding a UAE passport, employed full-time, and reporting directly to the Board. VARA regulates virtual assets in Dubai’s free zones and on the mainland. It does not regulate the DIFC. A DIFC compliance officer is not, by that rulebook, a VARA Compliance Officer.
The federal layer sits on both. Federal Decree by Law No. 10 of 2025 was issued on 30 September 2025. Article 42 puts it in force two weeks after publication in the Official Gazette. Article 41 repeals Federal Decree by Law No. 20 of 2018. The text does not print the gazette date. Cabinet Resolution No. 134 of 2025, Article 22, requires financial institutions, designated non-financial businesses and professions, and virtual-asset service providers to appoint a Compliance Officer at management level, with independence and with competence and experience. The DFSA’s updated AML Module came into force on 2 March 2026 to align the DIFC rulebook with that federal legislation. AML Rule 11.2.1 requires the MLRO to be resident in the UAE, subject to the exceptions written in the rule, and AML Rule 11.2.3 requires a deputy MLRO at an Authorised Firm other than a Representative Office. The deputy is a second name on the same programme. It is not automatically a second search.
The city hub for the wider market is legal recruitment in Dubai. License counts, courts and the free-zone file are on the Dubai legal market, 2026. Those pages do not reprint this appointment stack.