UAE Central Bank's New Remuneration Rules Reshape Bank and Insurer Governance

Remuneration is no longer an HR function—it's a governance tool.
The CBUAE's new regulation treats how banks pay employees as central to risk management and financial stability, not compensation administration.
Mark

Why does the central bank care how much banks pay their employees? Isn't that a business decision?

Mimi

Because how you pay people shapes what risks they take. If you pay traders only on short-term profits, they'll chase short-term profits—even reckless ones. If you tie pay to long-term outcomes and risk management, behavior changes. The regulator is saying: your remuneration structure is a governance tool, not just an HR function.

Mark

So they're not setting salary caps or anything like that?

Mimi

No. They're not saying "pay this much" or "pay that much." They're saying your board needs to demonstrate that whatever you pay, it supports prudent decision-making and long-term stability. You need to show your work.

Mark

What's a Material Risk Taker? That sounds like jargon.

Mimi

It's anyone whose job materially affects the institution's risk profile. A senior trader, a credit approver, an underwriter with real authority. Not necessarily a C-suite executive. A junior trader with significant dealing authority could qualify. Seniority doesn't determine it—impact does.

Mark

And these Material Risk Takers have to defer their bonuses?

Mimi

A significant portion of their variable pay must be deferred, yes. And it's subject to clawback—the bank can recover it if risk outcomes are poor. But there's a legal wrinkle: UAE Labour Courts have challenged deferred pay structures before. It's unclear how they'll treat deferral required by regulation.

Mark

What's the biggest headache for banks implementing this?

Mimi

Probably demonstrating the link between remuneration and risk. It's easy to say "we pay for performance." It's much harder to show, with documentation, that remuneration decisions actually reflect risk outcomes and conduct, not just profit. Supervisors will be looking for that evidence.

Mark

When does this all have to be done?

Mimi

Full compliance by July 2027. But institutions need to submit an assessment by October 2026. The real work is coordinating across legal, HR, risk, and compliance teams—functions that don't always talk to each other. It's not a remuneration policy update. It's a governance overhaul.

  • A sweeping new UAE Central Bank circular reframes banker pay not as an HR matter but as a pillar of prudential risk governance, demanding that boards actively demonstrate how compensation decisions reflect risk outcomes — not just profit.
  • Institutions face the difficult task of identifying 'Material Risk Takers' — a category defined by influence over institutional risk, not seniority — meaning traders, underwriters, and business heads may suddenly fall under deferred pay and clawback obligations they never anticipated.
  • Legally complex terrain lies ahead: UAE Labour Courts have previously challenged deferred remuneration structures, clawback provisions risk invalidation if criteria are subjective, and Labour Law caps on salary deductions constrain how institutions can recover amounts already paid.
  • Many existing employment contracts, bonus schemes, and incentive plans were never designed for these requirements, forcing institutions to seek employee consent for amendments or restructure variable pay into standalone policies that allow future flexibility.
  • With a framework assessment due to regulators by October 2026 and full implementation required by July 2027, institutions that delay risk entering supervisory engagement without the governance documentation, cross-functional alignment, or contractual architecture to defend their pay decisions.

In the summer of 2026, the UAE Central Bank issued a regulation that quietly redraws the boundary between compensation and governance, insisting that how institutions pay their people is inseparable from how they manage risk. Circular No. 5/2026 does not set salaries or cap bonuses — it demands that remuneration become a living expression of an institution's risk culture, board accountability, and long-term prudence. The move aligns the UAE with a global regulatory consensus forged after decades of observing how misaligned incentives can quietly hollow out financial stability. For banks and insurers across the Emirates, the question is no longer what people are paid, but whether the architecture of pay itself can withstand scrutiny as a governance instrument.

In July 2026, the UAE Central Bank issued Circular No. 5/2026 — a regulation that does not touch salary levels or bonus amounts, but instead repositions remuneration as a core instrument of prudential governance. The logic, borrowed from the Financial Stability Board and the Basel Committee, is straightforward: how institutions pay their people shapes whether those people take prudent risks or excessive ones. The CBUAE has now made that logic binding.

For most UAE banks and insurers, this demands more than a policy update. Remuneration has historically been managed as an HR function, largely separate from risk management and board oversight. The new framework requires the two to be fused. Boards must actively document how pay decisions reflect both financial performance and non-financial factors — conduct, compliance, long-term sustainability. Remuneration committees will need to work in genuine coordination with risk, compliance, and internal audit functions that have rarely operated together on compensation questions.

The regulation's most operationally demanding element is the identification of Material Risk Takers — individuals whose decisions materially affect institutional risk, regardless of title or seniority. Traders with dealing authority, senior underwriters, business heads approving large credit exposures: many will fall into scope for the first time. These individuals must receive a meaningful share of variable pay on a deferred basis, subject to malus and clawback provisions. This is where legal complexity sharpens. UAE Labour Courts have previously resisted deferred pay structures, clawback language must be objective to survive challenge, and Labour Law constraints on salary deductions limit recovery options.

Practically, many existing contracts and incentive plans lack the architecture to accommodate these requirements. Amending them will often require employee consent. A workable path for many institutions is to migrate variable remuneration terms out of individual contracts and into standalone employment policies — preserving future flexibility, particularly for institutions operating across the UAE mainland, DIFC, and ADGM simultaneously.

The implementation deadline is July 14, 2027, with an initial framework assessment due to the CBUAE by October 11, 2026. The institutions best positioned to meet that deadline are those that begin now — coordinating legal, HR, risk, compliance, and governance teams not merely to satisfy a regulatory checklist, but to build pay structures that can genuinely withstand supervisory scrutiny.

In July 2026, the Central Bank of the UAE issued a regulation that fundamentally reframed how banks and insurance companies think about compensation. Circular No. 5/2026 does not dictate salary levels or bonus amounts. Instead, it treats remuneration as a pillar of prudential governance—a tool that shapes institutional behavior, risk culture, and long-term stability. This marks a departure from how most financial institutions have historically managed pay: as a human resources function, separate from the machinery of risk management and board oversight.

The regulation reflects a global regulatory consensus. The Financial Stability Board, the Basel Committee on Banking Supervision, and the International Association of Insurance Supervisors have all concluded that how institutions compensate their employees directly influences whether those employees make prudent decisions or take excessive risks. The CBUAE has adopted this logic. Rather than prescribing compensation levels, the new framework requires institutions to demonstrate that their remuneration structures actively support prudent decision-making, effective risk management, and sustainable value creation over time.

For UAE banks and insurers, this is not a minor compliance adjustment. It demands a fundamental rethinking of governance. Many institutions already have remuneration policies on the books, but these were typically designed from an employment or compensation perspective. The regulation requires remuneration to be woven into the institution's strategic objectives, risk appetite, and long-term resilience. Boards can no longer simply approve annual pay proposals and move on. They must actively demonstrate how remuneration decisions reflect both performance and risk outcomes. Remuneration committees will need to play a more substantive role, working closely with risk committees, compliance, internal audit, and HR to ensure alignment. For most institutions, this will require stronger governance documentation, more frequent board reporting, and collaboration across functions that have traditionally operated in silos.

The most difficult challenge will be proving the connection between pay and risk. The regulation requires institutions to account for both financial and non-financial performance—conduct, governance, compliance, long-term sustainability—not just profit. This is a significant shift away from remuneration models that have historically centered on financial results. Supervisors will increasingly scrutinize how institutions evidence these decisions. If a board cannot point to documented risk and performance assessments that justify a remuneration outcome, regulators will notice. This is likely to become a prominent area of supervisory engagement, particularly where institutions struggle to demonstrate that pay decisions are grounded in their risk management framework.

The regulation introduces a concept that will require careful implementation: Material Risk Takers. These are not simply senior executives. They are individuals whose professional activities have a material impact on the institution's risk profile, regardless of job title or seniority. A trader with delegated dealing authority, a business head approving significant credit exposures, a senior underwriter with substantial underwriting power, or an investment professional making decisions that affect overall risk profile—all could qualify. Many institutions will discover that people they have never classified as Material Risk Takers now fall within scope. The challenge is not just identifying them but developing objective, documented methodologies that can withstand regulatory scrutiny.

Material Risk Takers must receive a significant portion of their variable remuneration on a deferred basis, with enhanced requirements for Senior Material Risk Takers. They must also be subject to malus (reduction of deferred pay) and clawback (recovery of paid remuneration) provisions. This is where implementation becomes legally complex. The UAE Labour Courts have previously challenged deferred remuneration structures, particularly where payment is deferred beyond employment termination. It remains unclear whether courts will allow such challenges when deferral is required by regulation. Clawback provisions face similar risk if they rely on subjective criteria; institutions must ensure clawback language is objective and clearly demonstrable. Additionally, UAE Labour Law caps how much can be deducted from future salary, which constrains how institutions can recover clawed-back amounts.

Many institutions will find that their existing bonus arrangements, deferred structures, and incentive plans were not designed with these requirements in mind. Employment contracts, executive service agreements, and incentive plan rules may lack the flexibility needed to implement deferred remuneration, performance adjustments, malus, and clawback. Amending existing employment contracts to introduce these mechanisms will likely require employee consent. One practical solution is to move variable remuneration terms out of individual contracts and into separate employment policies, which institutions can amend more flexibly in the future. This approach is particularly relevant for institutions operating across the UAE mainland, the DIFC, and the ADGM, or for international groups that already apply group-wide remuneration policies.

The implementation deadline is July 14, 2027. Institutions must submit an assessment of their existing remuneration framework to the CBUAE by October 11, 2026. The breadth of the exercise should not be underestimated. It spans governance changes, board approvals, policy revisions, contractual amendments, and remuneration structure changes. A holistic approach is essential: governance frameworks, remuneration structures, and supporting documentation must collectively satisfy the CBUAE's enhanced supervisory expectations. Institutions that begin preparation early and coordinate across legal, HR, risk, compliance, and governance teams are likely to emerge with stronger governance overall, not merely a compliance checkbox.

Remuneration structures play an important role in shaping institutional behaviour, risk culture and governance.
— CBUAE regulatory framework
Compliance will require considerably more than updating a remuneration policy. It calls for coordinated consideration of financial regulation, corporate governance, employment law and operational governance.
— Dentons analysis
Contact Us FAQ