In the UAE a directorship is not a title of honour but a distribution of personal risk. The company is a separate legal person, yet the law reaches through it to the individuals who steer it — imposing standards of conduct, and attaching liability when those standards are breached. Understanding where the corporate veil ends and personal exposure begins is now the central discipline of board service.
The governance architecture
The onshore framework is set by the Commercial Companies Law — Federal Decree-Law No. 32 of 2021 — recently and significantly recast by Federal Decree-Law No. 20 of 2025, whose provisions are being phased in across 2025 and 2026. The Law allocates authority by company form. In the limited liability company, the workhorse of the UAE economy, management vests in one or more managers appointed through the memorandum, a management contract, or a resolution of the general assembly, and removable by that assembly or by the court for cause. Managers exercise the full powers of management within the objects of the company and the limits of their mandate; they cannot lawfully exceed what the constitutional documents or a power of attorney confer.
In the joint stock company the locus of power is the board of directors, elected by shareholders — for public companies typically by secret ballot at the general assembly — for renewable terms that the Law caps in years, not decades. The board sets strategy and appoints executives; the general assembly retains the reserved matters. Between these organs sits the perennial governance question the UAE regime keeps sharpening: who decides what, and who answers for it.
The duties directors and managers owe
The Law expresses, in civil-law register, a recognisable cluster of duties. A director or manager must act within their powers, keeping to the objects and mandate of the company. They must act with the care of a prudent person — a standard the 2025 amendments articulate more explicitly as acting with due care and in the best interests of the company. They must act in the company's interest rather than a personal or factional one. And they must avoid conflicts of interest and self-dealing: a director may not compete with the company or exploit its opportunities without consent, must declare interests in matters before the board, and must abstain from the tainted vote.
The 2025 reforms harden the machinery around these principles — formal conflict-of-interest registers, disciplined board minutes, and disclosure of related-party transactions above defined thresholds. What was once good practice is migrating into enforceable obligation, with strengthened penalties for disclosure failures and inaccurate records.
The corporate veil protects shareholders from the company's debts; it does not protect directors from their own conduct.
The consequences of breach
Here the UAE regime is unsentimental. Managers and directors are personally liable to the company, to shareholders and partners, and to third parties for fraud, abuse of power, breach of the Law or the constitution, and — critically — for gross error in management. The company cannot contract this liability away; any clause purporting to exempt a director from it is void. Where a harmful decision flows from a collective board resolution, liability is joint among those who took it. Absence from the meeting is not, by itself, a defence: a director who was present and dissented must have their objection minuted, and a director who was absent must show they neither knew of the resolution nor could reasonably have known.
This is the practical heart of the matter. Liability is not confined to intra-company disputes. Creditors and other third parties can, in defined circumstances, pursue the individuals behind the entity — and in insolvency the exposure grows sharper.
Listed-company governance: the SCA layer
For public joint stock companies whose shares trade on the Dubai Financial Market or Abu Dhabi Securities Exchange, the Securities and Commodities Authority's Corporate Governance framework — issued in 2020 and amended since — sits on top of the Companies Law. Its pillars are accountability, fairness, transparency, disclosure and responsibility, and it converts them into structure:
- Board composition — a defined proportion of independent directors and limits on executive dominance, with recent reforms adjusting the independence ratio and, notably, permitting an executive chair under conditions.
- Committees — a mandatory audit committee overseeing financial reporting and external audit, and a nomination and remuneration committee governing board appointments and pay.
- Related-party transaction controls — thresholds, disclosures and, above certain levels, shareholder approval.
- Disclosure — continuous and periodic reporting to the market and the regulator.
The compliance perimeter a board must own
Modern directors answer for more than the balance sheet. Five regimes now form the perimeter of the boardroom:
- Ultimate Beneficial Owner disclosure — under Cabinet Decision No. 58 of 2020, companies must maintain and update registers of real beneficiaries (broadly, those holding 25% or controlling the entity) and report changes to the licensing authority within short deadlines.
- Economic Substance Regulations — Cabinet Resolution No. 57 of 2020 requires entities carrying on relevant activities to demonstrate genuine substance and to file notifications and reports.
- AML/CFT — obligations to screen, monitor and report, with directors accountable for the control environment.
- Corporate tax — under Federal Decree-Law No. 47 of 2022, with a 9% rate above the threshold; note that directors and officers can be treated as connected persons, so their remuneration must meet arm's-length transfer-pricing principles to be deductible.
- Data protection — federal and free-zone regimes governing personal data, with governance and breach-response expectations landing on the board.
DIFC and ADGM: the common-law alternative
The two financial free zones offer a different governance grammar. The DIFC Companies Law (DIFC Law No. 5 of 2018) and the ADGM Companies Regulations codify directors' duties along lines familiar from the UK Companies Act — to act within powers, promote the success of the company, exercise independent judgment, exercise reasonable care, skill and diligence, avoid conflicts, and declare interests. For groups choosing between onshore and free-zone incorporation, the substance of the duties converges; the interpretive tradition, the courts, and the enforcement texture differ.
Managing personal exposure
The prudent director treats exposure as a system to be engineered, not a risk to be hoped away. In practice: know the precise limits of your mandate and stay inside them; ensure decisions rest on adequate information and that dissent and abstention are minuted; maintain a live conflicts register and recuse early; verify that UBO, ESR, AML, tax and data-protection obligations are actually being discharged, not merely delegated; and secure properly scoped directors' and officers' insurance and, where lawful, indemnities — remembering that no policy or clause cures fraud or gross error. Governance, done well, is simply the discipline of being able to show — afterwards — that you acted within your powers, with care, and in the company's interest.
Key instruments: Commercial Companies Law (Federal Decree-Law No. 32 of 2021) as amended by Federal Decree-Law No. 20 of 2025; SCA Corporate Governance framework (2020, as amended); Cabinet Decision No. 58 of 2020 (UBO); Cabinet Resolution No. 57 of 2020 (Economic Substance); Federal Decree-Law No. 47 of 2022 (Corporate Tax); DIFC Companies Law (DIFC Law No. 5 of 2018); ADGM Companies Regulations. This page is general information, not legal advice; specific matters turn on their facts and on the instruments in force at the relevant time.