Country-by-Country Reporting (CbCR) Advisory

It is an annual report that large multinational groups must file, breaking down their revenue, profit, tax paid, employees, and assets by country. Instead of a tax authority seeing only the local UAE entity's numbers, CbCR shows the whole group's global footprint in one document. It exists because, under the OECD's BEPS Action 13 initiative, tax authorities wanted visibility into whether profit is being booked in low-tax jurisdictions that have little real business activity — a pattern known as base erosion and profit shifting.

Only MNE Groups whose total consolidated group revenue in the preceding fiscal year meets or exceeds the threshold prescribed under Cabinet Resolution No. 44 of 2020, and where the Ultimate Parent Entity (or a designated Surrogate Parent Entity) is UAE tax resident. Most UAE companies — including the vast majority of free zone and mainland SMEs — fall well below this threshold and have no CbCR obligation at all.

Usually yes, but a lighter one — the CbCR Notification. Even where the full report is filed centrally by the foreign Ultimate Parent Entity and reaches the UAE through automatic exchange, the UAE Constituent Entity typically still has to file an annual notification confirming which entity is filing the group's CbCR and in which jurisdiction. Only in specific circumstances — such as the absence of an effective exchange agreement between the UAE and the UPE's jurisdiction, or a systemic failure to exchange — would the UAE entity itself be required to file a full local CbCR as a Surrogate Parent Entity.

The Notification is a short annual filing identifying the group's Reporting Entity, its tax residence jurisdiction, and the UAE entity's own classification (Ultimate Parent, Surrogate Parent, or Constituent Entity). The CbCR itself is the substantive report containing the country-by-country financial and headcount data. They are assessed separately, filed within different windows relative to the fiscal year end, and penalised independently — a group can be compliant on one and non-compliant on the other.

For each jurisdiction the group operates in: revenue split between related-party and unrelated-party transactions, profit (or loss) before income tax, income tax paid on a cash basis, income tax accrued for the current year, stated capital, accumulated earnings, number of employees, and tangible assets excluding cash and cash equivalents. At the entity level, the report also captures each Constituent Entity's tax identification number, jurisdiction of organisation if different from tax residence, and main business activity from a prescribed list of categories.

The CbCR is prepared in the OECD's prescribed XML schema format and submitted through the Ministry of Finance's designated filing system, following the process set out under Cabinet Resolution No. 44 of 2020 and related Ministerial Decisions. The notification is filed separately through the same channel. Both require the Reporting Entity's details, tax registration information, and — for the CbCR itself — the full country-by-country dataset formatted to the schema's technical specifications.

The UAE applies administrative penalties for late or non-compliant CbCR notifications and filings under its penalty framework for Cabinet Resolution No. 44 of 2020, assessed independently for the notification and the report. Beyond the direct penalty, a late or defective filing can itself become a point of scrutiny once the (eventually filed) CbCR is exchanged with partner tax authorities — timing gaps are visible to anyone reviewing the group's compliance history.

No. CbCR is a disclosure and reporting obligation, not a tax assessment. It does not itself impose tax. However, the data disclosed can prompt a tax authority — in the UAE or in a partner jurisdiction receiving the exchanged report — to open a transfer pricing enquiry if the profit allocation across jurisdictions looks disproportionate to the reported substance (employees, assets) in each location. Any resulting tax adjustment would come through a separate transfer pricing assessment process, not through the CbCR filing itself.

They are complementary, not the same thing. CbCR is a high-level, group-wide picture across all jurisdictions. The Master File (group-wide) and Local File (entity-specific) required under the UAE Corporate Tax Law, Federal Decree-Law No. 47 of 2022, go into much greater detail on the group's value chain, intercompany pricing policies, and the arm's-length analysis for specific related-party transactions. A group above the CbCR threshold will very often also meet the Master File/Local File thresholds, and the three documents need to tell a consistent story.

Typically the UPE files centrally in its own jurisdiction of tax residence — in this case India, under Section 286 of the Income-tax Act, using Form 3CEAC (notification) and Form 3CEAD (report). The UAE Constituent Entity's obligation is then usually limited to its own CbCR Notification, confirming that the Indian parent is the Reporting Entity, provided an effective exchange relationship exists between India and the UAE for CbCR purposes. PNPC coordinates both filings as one engagement from our Chennai/Bangalore/Hyderabad and Dubai offices.

The obligation is assessed annually against the immediately preceding fiscal year's consolidated revenue, so crossing the threshold this year typically triggers the notification and filing obligation from the current fiscal year going forward. We recommend building the CbCR data collection framework in the year before the threshold is expected to be crossed, so the first filing year is not a scramble.

Yes — CbCR and the Qualifying Free Zone Person (QFZP) 0% Corporate Tax regime are entirely separate frameworks. QFZP status relates to the UAE Corporate Tax rate applied to qualifying income of a Free Zone entity. CbCR is assessed at the consolidated group revenue level, regardless of any individual entity's tax rate or QFZP status. A free zone entity that is the UAE-resident UPE (or Surrogate Parent) of a large group above the CbCR threshold has a CbCR obligation independent of its own Corporate Tax position.

We start from the Ultimate Parent Entity's audited (or, where audit is not yet complete, best-available) consolidated financial statements for the immediately preceding fiscal year, applying the group's normal consolidation basis and currency, and compare the resulting figure against the threshold prescribed under Cabinet Resolution No. 44 of 2020. Where the group's fiscal year does not align with the calendar year, or where a material acquisition or disposal occurred mid-year, we document the basis of the calculation carefully, since this is the figure most likely to be questioned first if the classification is later challenged.

A Surrogate Parent Entity is a Constituent Entity that a group designates to file the CbCR on behalf of the whole group in place of the actual Ultimate Parent Entity — typically because the UPE's home jurisdiction does not require CbCR filing, does not have an effective exchange agreement with the UAE, or there has been a systemic failure in that jurisdiction's exchange mechanism. A UAE entity would only become a Surrogate Parent Entity by the group's deliberate designation, not automatically.

There is no independent audit requirement specific to the CbCR filing itself under Cabinet Resolution No. 44 of 2020, but the underlying data must be capable of reconciliation to the group's consolidated financial statements, which are typically audited at the group level as part of normal statutory reporting. We build formal reconciliation working papers as part of every CbCR engagement so the figures are defensible even without a standalone CbCR audit.

The Reporting Entity's finance controller or CFO for data ownership, group tax or transfer pricing lead if one exists, and — because CbCR data is reviewed by boards and, in listed or regulated groups, by audit committees — appropriate senior sign-off before filing. PNPC prepares a summary memorandum specifically for this internal governance step, distinct from the technical filing itself.

Realistically 8 to 10 weeks from the initial threshold assessment to the filed report, assuming reasonably prompt data availability from group entities. Groups with many jurisdictions, non-aligned fiscal year ends, or fragmented ERP systems across subsidiaries should plan for a longer data-gathering phase. The notification itself, once entity classification is confirmed, can typically be filed well ahead of the full report.

The UAE's administrative penalty framework under Cabinet Resolution No. 44 of 2020 addresses both late and non-compliant filings, which includes filings that are inaccurate or incomplete, separately from purely late filings. Beyond the direct penalty, an inaccurate CbCR that is subsequently exchanged with partner jurisdictions can trigger downstream transfer pricing enquiries in those jurisdictions that are considerably more costly to resolve than the original filing would have been to get right.

PNPC can act on the group's behalf for both the notification and the report, subject to the appropriate authorisation being granted for the Ministry of Finance's filing system. In practice, we prepare the data, run the reconciliation, validate the XML file against the current schema, and manage the submission, while the Reporting Entity retains ultimate ownership and sign-off responsibility for the filing, consistent with good governance practice.

CbCR data is not publicly disclosed by the UAE Ministry of Finance. It is exchanged confidentially between tax administrations under the Multilateral Competent Authority Agreement on the Exchange of CbC Reports and equivalent bilateral arrangements, for use in tax risk assessment and transfer pricing analysis by the receiving tax authorities — not for public disclosure.

Yes, in the sense that real substance — employees, tangible assets, and decision-making activity — reported in the CbCR for the UAE jurisdiction supports the profit the group allocates there, which is precisely what a reviewing tax authority looks for when assessing whether reported profit matches reported activity. A UAE entity with strong reported profit but minimal reported headcount and assets is the classic profile that attracts scrutiny; one with substance to match its profit allocation is inherently lower risk.

No longer as an active filing obligation. The UAE's Economic Substance Regulations, originally introduced under Cabinet Resolution No. 57 of 2020 (as amended), required in-scope entities conducting a defined Relevant Activity to file an annual ESR notification and, where applicable, an ESR report. Under Cabinet Decision No. 98 of 2024, the ESR notification and report filing requirement was discontinued for financial years starting on or after 1 January 2023 — so most groups no longer have a live, ongoing ESR filing obligation for those periods. CbCR under Cabinet Resolution No. 44 of 2020 is unaffected by this change and continues to apply on its own terms, based on the group's consolidated revenue threshold.

CbCR is assessed against the group's own consolidated fiscal year, which may or may not align with individual Constituent Entities' local statutory or tax fiscal years, including the UAE entity's Corporate Tax period. We map the group's consolidated fiscal year end, the UAE entity's own tax period, and the resulting notification and filing deadlines separately, since a mismatch here is a common source of missed dates.

The obligation is assessed at the group level, so a newly incorporated UAE Constituent Entity within an already-reporting group typically needs to be added to the existing CbCR data set and entity listing for the current or next filing cycle, rather than triggering an entirely new, separate obligation. We treat new entity onboarding into an existing CbCR-reporting group as a defined step in our new entity setup process for clients already engaged with us on CbCR.

We maintain a standing working file for each CbCR client that carries forward the prior year's data, reconciliation methodology, entity classifications, and Master File/Local File cross-references, so each year's filing builds on a consistent base rather than starting from a blank page. Any change in classification, group structure, or transfer pricing policy is flagged and explained against the prior year's position.

We first assess the group's actual historical obligation — confirming the threshold was genuinely crossed and the classification was correct for the missed year — then work through a regularisation process: filing the outstanding notification and/or report, addressing any administrative penalty exposure under the current framework, and putting a forward calendar in place so it does not recur. Voluntary regularisation, done properly and promptly, is generally viewed more favourably than a filing that only happens after a query from the authorities.

Yes. An acquisition of the UPE typically changes the group's consolidated structure, potentially its Reporting Entity, its consolidated revenue threshold position, and its fiscal year alignment — all of which need to be reassessed. We treat any change of ultimate ownership at the top of the group as an automatic trigger to re-run the full CbCR classification and threshold analysis for the UAE entity.

We agree a fixed fee for the initial threshold assessment and entity classification phase, and a separate fixed or scoped fee for the annual notification and filing cycle once the obligation is confirmed, based on the number of jurisdictions and Constituent Entities involved. Both are confirmed in writing before work begins. Ongoing annual engagements are typically priced as a retainer that also covers the notification, reconciliation, and filing for that fiscal year.

A portal files a form. It does not assess whether your group's threshold classification is correct, does not cross-check the CbCR against your Master File and Local File, does not track the notification and the report as two separate deadlines, and is not present when a foreign tax authority sends a query eighteen months after the exchange. PNPC has advised cross-border groups on international taxation since 1986, with offices across Chennai, Bangalore, Hyderabad and Dubai. We treat CbCR as one part of a group's ongoing international tax position — not an isolated annual form.

Our direct filing capability covers the UAE (through our Dubai office) and India (through our Chennai, Bangalore and Hyderabad offices). For groups with Constituent Entities in other jurisdictions, we coordinate the UAE and India components directly and work alongside the group's local advisors in other countries to ensure the group's overall CbCR position — classification, data, and narrative — is consistent everywhere it is exchanged.

Treating the notification and the report as one obligation with one deadline, when they are legally and administratively separate. The second most common: preparing the CbCR data in isolation from the Master File and Local File, so the three documents tell inconsistent stories about the same group when a tax authority eventually reviews them together.

If growth projections suggest the group will cross the threshold within the next two to three fiscal years, building the data collection framework and reconciliation discipline in advance means the first mandatory filing year is a continuation of an existing process rather than a standing start under deadline pressure. For groups well below the threshold with no near-term growth plans crossing it, a lighter annual threshold-monitoring check is usually sufficient rather than a full advisory engagement.

They do not interact directly — UAE Corporate Tax under Federal Decree-Law No. 47 of 2022 applies a 9% rate on taxable income above AED 375,000 (with 0% below that threshold, and a separate 0% regime for qualifying income of Qualifying Free Zone Persons), and is assessed at the level of each individual UAE taxable person. CbCR is assessed at the consolidated group revenue level and does not depend on any single entity's Corporate Tax liability or rate. A UAE entity can have a modest, even zero, standalone Corporate Tax liability and still sit inside a group with a full CbCR obligation, because the group's total consolidated revenue — not the UAE entity's own tax bill — is what triggers CbCR.

An annual retainer that covers the following year's threshold re-assessment, entity classification review, notification filing, data collection coordination, reconciliation, XML preparation, and MoF submission — plus advisory support if a partner jurisdiction (including India) raises a query following automatic exchange of the group's CbCR data. We also flag, proactively, any changes to Cabinet Resolution No. 44 of 2020, its thresholds, or its administrative penalty framework that could affect the client's obligations.