UAE Taxation & Regulatory Compliance · Transfer Pricing
Country-by-Country Report (CbCR) Filing
Once a UAE group crosses the Country-by-Country Reporting threshold, the calendar takes over: a Notification deadline, a twelve-month filing deadline, an XML schema that rejects on the smallest formatting error, and a Ministry of Finance portal that treats notification and report as two independently penalised obligations.
Chartered Accountants · Dubai · Since 1986
Country-by-Country Report (CbCR) filing is the operational, deadline-driven compliance obligation that sits under the OECD's BEPS Action 13 framework as implemented in the UAE by Cabinet Resolution No. 44 of 2020 (as amended by subsequent Cabinet and Ministerial Decisions), administered by the Ministry of Finance (MoF) — not the Federal Tax Authority, which is a distinction that catches many groups off guard since every other UAE tax obligation in recent years has moved through the FTA. Filing is a two-part exercise, and the two parts are assessed and penalised independently: a CbCR Notification, submitted annually through the MoF's CbCR portal identifying the Reporting Entity, its tax jurisdiction, and the UAE entity's role in the group (Ultimate Parent Entity, Surrogate Parent Entity, or Constituent Entity relying on another jurisdiction's filing); and the CbCR itself, an XML Schema-formatted report containing the group's revenue, profit before tax, income tax paid and accrued, stated capital, accumulated earnings, headcount, and tangible assets, broken out jurisdiction by jurisdiction, filed by the Reporting Entity within twelve months of the fiscal year end.
The filing obligation applies only where the MNE Group's total consolidated group revenue in the immediately preceding fiscal year meets or exceeds the threshold prescribed under the Cabinet Resolution — a figure set with reference to the OECD's own recommended threshold and periodically confirmed by Ministerial Decision. Below that threshold, a UAE entity has no CbCR filing obligation at all, though it may still need to respond to a group-level request for local financial data if a foreign parent is filing centrally. Above it, the UAE Ultimate Parent Entity (or Surrogate Parent Entity where nominated) must file; a UAE Constituent Entity that is not itself the filer must still submit a Notification confirming which group entity is filing and where.
This is fundamentally a data-assembly and portal-submission exercise built on top of the group's consolidated financial statements — the analytical question of whether the group's transfer pricing policy will withstand the scrutiny a CbCR invites is a separate, upstream advisory conversation. PNPC's CbCR filing engagement takes the consolidated numbers, the group structure chart, and the Reporting Entity determination as inputs, and produces a validated XML submission, a filed Notification, and an audit trail — MoF acknowledgement receipts, submission confirmations, version history — that becomes part of the group's UAE Corporate Tax compliance file and its evidentiary record for any future FTA transfer pricing enquiry.
Because the CbCR is automatically exchanged with partner tax administrations under the Multilateral Competent Authority Agreement (MCAA) on the Exchange of CbC Reports, filing accuracy has consequences well beyond the UAE. A single misclassified jurisdiction column, a headcount figure pulled from the wrong reporting period, or an XML validation error that causes a resubmission after the deadline can each trigger scrutiny in every jurisdiction the group operates in — including India, where many PNPC clients also maintain group entities subject to Rule 10DB of the Income-tax Rules. We file with that downstream exposure in view, not just the UAE deadline in isolation.
When a UAE entity has a CbCR filing obligation
Your MNE Group's total consolidated group revenue in the preceding fiscal year meets or exceeds the threshold prescribed under Cabinet Resolution No. 44 of 2020 — the trigger is group-wide consolidated revenue, not the UAE entity's standalone turnover
The UAE entity is the Ultimate Parent Entity of the group, tax resident in the UAE, and therefore the default Reporting Entity obligated to file the CbCR itself
The UAE entity has been nominated as Surrogate Parent Entity by the group — often done to file once centrally rather than have every constituent jurisdiction chase a foreign UPE for data
The UAE entity is a Constituent Entity (not the filer) but still needs its annual CbCR Notification submitted confirming who is filing and where — this obligation exists even when the UAE entity itself owes zero report
A prior year's Notification or Report needs to be corrected, resubmitted, or amended following a portal validation rejection, a restated consolidated financial statement, or a change in Reporting Entity identity
The group is filing for the first time following its first fiscal year above the revenue threshold and needs the Reporting Entity determination, portal registration, and filing calendar set up from scratch
When CbCR filing is not the right engagement
Your group's consolidated revenue sits below the prescribed threshold — no Notification or Report is due, though PNPC still recommends an annual threshold test since group revenue can cross the line without local management noticing
You need help deciding whether your intercompany pricing is defensible or want a Master File/Local File prepared — that is transfer pricing documentation and arm's-length advisory, a related but analytically distinct engagement PNPC also offers
You have not yet determined which group entity qualifies as the Reporting Entity or whether the UAE entity is UPE, Surrogate Parent, or a plain Constituent Entity — that determination should be settled first as a short advisory step before the filing engagement is scoped
Your only need is a general international tax health check across the group, unconnected to an imminent CbCR deadline — that is broader cross-border advisory, not a filing engagement
The group has no UAE-resident entity in its structure at all — CbCR obligations follow tax residence, and a UAE-incorporated entity that is fully tax resident elsewhere sits outside MoF's CbCR jurisdiction for that entity
CbCR filing role by UAE entity position in the MNE Group
| Entity Role | Notification Required | Full XML Report Required | Typical Trigger | Filing Deadline Discipline |
|---|---|---|---|---|
| Ultimate Parent Entity (UAE tax resident) | Yes — annually | Yes — files the group CbCR | Group consolidated revenue meets/exceeds threshold and UAE entity sits at the top of the ownership chain | Notification and Report tracked as two separate deadlines, both owed by this entity |
| Surrogate Parent Entity (UAE tax resident, nominated) | Yes — annually, confirming surrogate status | Yes — files on behalf of the group | Group nominates the UAE entity to file centrally instead of the foreign UPE | Surrogate designation must itself be communicated to MoF and to the UPE's home jurisdiction before the Notification is due |
| Constituent Entity only (UAE tax resident, not the filer) | Yes — annually, identifying the actual Reporting Entity and its jurisdiction | No — relies on the Reporting Entity's filing and the exchange-of-information network | Group is above threshold but a foreign UPE or Surrogate Parent files elsewhere | Notification-only filing is still time-bound and separately penalised if missed or filed with incorrect Reporting Entity details |
| UAE entity, group below threshold | No | No | Group consolidated revenue below the prescribed Cabinet Resolution threshold for the relevant fiscal year | No filing obligation, but PNPC recommends an annual revenue re-test since acquisitions or organic growth can push the group over the line mid-cycle |
| UAE entity, no CbCR obligation but Master File/Local File applies | No CbCR notification | No CbCR report | UAE entity meets UAE Corporate Tax related-party/connected-person documentation thresholds independent of the CbCR test | Tracked under the separate transfer pricing documentation engagement, not the CbCR filing calendar |
Reporting Entity status is a group-level determination, not a UAE-only decision — it depends on where the ultimate parent is tax resident, whether that jurisdiction has an effective CbCR exchange arrangement with the UAE, and whether the group has nominated a surrogate filer. PNPC confirms this determination in writing before scoping the filing engagement, since it dictates which of the rows above applies.
| # | Stage & What PNPC Does | What Groups Miss Without a CA Firm | Timeline |
|---|---|---|---|
| 1 | Threshold & Reporting Entity Determination — confirm the group owes a CbCR obligation at all | Group consolidated revenue is measured on the immediately preceding fiscal year's consolidated financial statements — not the UAE entity's standalone books, and not a forecast. We pull the actual consolidation figure and test it against the current prescribed threshold before assuming any obligation exists. | Week 1 |
| 2 | Confirm Ultimate Parent / Surrogate Parent / Constituent Entity status | This determination decides whether the UAE entity files a full Report, a Notification only, or nothing. Getting this wrong in either direction creates a compliance gap or an unnecessary filing. We confirm it against the group's actual ownership chain and each relevant jurisdiction's own CbCR exchange status with the UAE. | Week 1–2 |
| 3 | MoF Portal Registration — register the Reporting Entity / Constituent Entity on the Ministry of Finance CbCR system | The MoF CbCR portal is separate from the FTA's EmaraTax system used for VAT and Corporate Tax — groups that assume one login covers both lose time discovering otherwise. We handle registration and credential setup for the responsible UAE entity. | Week 2 |
| 4 | CbCR Notification Filing — the first, independently-deadlined obligation | The Notification identifies the Reporting Entity, its tax jurisdiction, and the UAE entity's role — and is due on its own statutory clock, separate from the Report. Filing the Notification late, or naming the wrong Reporting Entity, attracts its own administrative penalty even if the eventual Report is filed correctly and on time. | Within the Notification window prescribed by the Cabinet Resolution and related Ministerial Decisions — PNPC files proactively, not on request |
| 5 | Consolidated Data Collection — revenue, profit before tax, tax paid/accrued, capital, earnings, headcount, tangible assets by jurisdiction | The CbCR requires jurisdiction-by-jurisdiction figures pulled from the group's consolidation package, reconciled to the consolidated financial statements — not simple aggregation of local trial balances, which produces figures that will not tie out on review. We work from the group CFO's consolidation file and reconcile every jurisdiction line. | Week 3–6, dependent on group financial close |
| 6 | Table 1 Preparation — jurisdiction-level financial and economic activity summary | Table 1 requires consistent source data across every jurisdiction in the group — mixing local GAAP figures with IFRS consolidation figures without adjustment is a common defect that surfaces in XML validation or, worse, only after submission. We standardise the data source before mapping it into Table 1. | Week 4–6 |
| 7 | Table 2 Preparation — list of constituent entities by jurisdiction and their main business activities | Table 2 must reflect the group's actual legal entity chart at the fiscal year end, including dormant or newly incorporated entities that management sometimes omits because they had no transactions. Omitted entities are one of the most common causes of a CbCR that does not reconcile against Table 1 on review. | Week 4–6 |
| 8 | XML Schema Validation — OECD CbC XML Schema compliance check before submission | The MoF portal validates against the OECD's CbC XML Schema — a strict, machine-readable format. Encoding errors, incorrect currency codes, malformed jurisdiction codes, or a missing MessageSpec element cause an outright rejection on upload, which can cost days if discovered close to the deadline. We validate against the schema before the portal ever sees the file. | Week 6–7 |
| 9 | Report Submission on MoF Portal — filed by the Reporting Entity within twelve months of fiscal year end | The twelve-month deadline runs from the fiscal year end, not from the date data becomes available or the date the group's auditors sign off — groups that wait for finalised audited accounts sometimes discover they have compressed the filing window to weeks. We build the filing timeline backward from the statutory deadline at the start of the engagement. | Within 12 months of FY end — PNPC targets submission with a buffer, not on the deadline itself |
| 10 | MoF Acknowledgement & Submission Record — retained as part of the Corporate Tax compliance file | A filed CbCR is not evidence of compliance without the portal acknowledgement receipt. We retain the full submission trail — Notification acknowledgement, Report acknowledgement, XML file as submitted, and any portal correspondence — as part of your permanent compliance file, available for any future FTA enquiry. | On submission — filed permanently in the client compliance record |
| 11 | Cross-Check Against Master File / Local File Narrative | A CbCR that shows profit concentrated in a low-headcount, low-asset jurisdiction, inconsistent with the group's Master File value-chain narrative, is a standard audit-selection flag for tax authorities worldwide. We flag any such inconsistency to the group before submission — not after a tax authority does. | Week 6–7, before final submission |
| 12 | India-Side Coordination (Where Applicable) — Rule 10DB Notification and Report alignment | Groups with an Indian parent or subsidiary have a parallel obligation under Rule 10DB of the Income-tax Rules — Form 3CEAC (notification) and Form 3CEAD (CbCR itself) filed with Indian tax authorities. Where the UAE and Indian entities sit in the same group, PNPC's India and Dubai desks coordinate the two filings so the underlying data and Reporting Entity position are consistent across both jurisdictions. | Aligned to the Indian fiscal year and Rule 10DB deadlines where applicable |
| 13 | Amendment & Correction Filing (As Needed) — restated accounts, portal rejections, or Reporting Entity changes | A CbCR already filed may need amendment following a restatement of consolidated accounts, a change in which group entity is the Reporting Entity, or correction of an error identified after submission. We manage amendment filings through the same MoF portal process, with a clear audit trail of what changed and why. | As triggered — PNPC on call for the life of the engagement |
| 14 | Following-Year Filing Calendar Setup — CbCR is an annual, recurring obligation | Once above threshold, the obligation recurs every fiscal year until the group genuinely falls below it — a one-off filing mindset is the most common way groups end up delinquent in year two. We set the Notification and Report deadlines for the following fiscal year into the client's compliance calendar at the close of this year's engagement. | Ongoing — annual cycle |
Realistic engagement timeline for a first-time filer: 6–8 weeks from data collection kickoff to validated XML submission, assuming the group's consolidated financial data is available at engagement start. The Notification deadline is materially earlier than the Report deadline and is tracked as a separate milestone — do not assume completing one satisfies the other.
Full group ownership chart showing every constituent entity, its jurisdiction of tax residence, and the ultimate parent — current as at the relevant fiscal year end
Confirmation of the Ultimate Parent Entity's jurisdiction of tax residence and whether that jurisdiction has an effective CbCR exchange arrangement with the UAE
Surrogate Parent Entity nomination documentation, where applicable — board resolution or group policy document confirming the UAE entity's surrogate status
Trade licence and Tax Registration Number (TRN) of the UAE Reporting Entity or Constituent Entity
Corporate Tax Registration Number under Federal Decree-Law No. 47 of 2022, where the UAE entity is separately registered for Corporate Tax
Audited or management consolidated financial statements for the relevant fiscal year, prepared under the group's applicable accounting standard
Jurisdiction-by-jurisdiction breakdown of revenue — related-party and unrelated-party components separately identified
Jurisdiction-by-jurisdiction profit (loss) before income tax
Income tax paid (on a cash basis) and income tax accrued (current year) by jurisdiction
Stated capital and accumulated earnings by jurisdiction as at fiscal year end
Number of employees (full-time equivalent) by jurisdiction
Tangible assets other than cash and cash equivalents, by jurisdiction
Complete list of all constituent entities in the group by jurisdiction, including dormant, holding-only, and newly incorporated entities
Main business activity classification for each constituent entity — consistent with the OECD's prescribed activity categories used in the CbC XML Schema
Jurisdiction of incorporation for each entity, where different from its jurisdiction of tax residence
Entity-level identifiers (registration numbers, tax identification numbers) sufficient for MoF portal data entry
Identification of the Reporting Entity — name, jurisdiction of tax residence, and tax identification number
Confirmation of the UAE entity's role — Ultimate Parent Entity, Surrogate Parent Entity, or Constituent Entity
Fiscal year to which the Notification relates, matching the group's consolidated reporting period
Authorised signatory details for the UAE entity submitting the Notification on the MoF portal
Currency used for reporting, with confirmation of the exchange rate convention applied where jurisdictions report in different currencies
Rounding convention applied consistently across all jurisdiction figures
Additional Information section narrative — MoF and OECD Schema allow (and in some cases expect) a free-text explanation of any figure that would otherwise appear anomalous, such as a one-off gain, restructuring, or unusual headcount movement
Prior-year CbCR (if this is not the group's first filing) for consistency check on entity list, activity classifications, and reporting currency
Indian entity's PAN and confirmation of whether the Indian entity is itself the Ultimate Parent, an Alternate Reporting Entity, or a Constituent Entity under Rule 10DB of the Income-tax Rules
Form 3CEAC (India CbCR intimation) filing status and date, where the Indian entity has its own notification obligation
Confirmation of which entity — Indian or UAE — is the group's designated Reporting Entity, to avoid duplicate or conflicting filings across the two jurisdictions
Master File and Local File status for the Indian entity under Rule 10DA, to the extent PNPC's India desk is coordinating a consistent group narrative across both filings
MoF portal acknowledgement receipt for the Notification
MoF portal acknowledgement receipt for the Report
Final XML file as submitted, version-controlled against any amended or corrected resubmission
Correspondence trail with MoF, including any query response or clarification requested during processing
| Phase | Triggered By | PNPC CA Guidance | Risk If Ignored |
|---|---|---|---|
| First-Year Threshold Crossing | Group consolidated revenue meets/exceeds the prescribed Cabinet Resolution threshold for the first time | Threshold re-test performed against the actual consolidated financial statements, not management estimate. Reporting Entity determination confirmed in writing. MoF portal registration initiated immediately once the obligation is confirmed. | Groups often discover the threshold was crossed only when preparing Corporate Tax filings months later — by which point the Notification deadline may already have passed, triggering an avoidable penalty for a filing that had not even been on the compliance radar. |
| Annual Notification Cycle | Every fiscal year the group remains above threshold, or the Reporting Entity/role changes | Notification filed on its own deadline, tracked independently from the Report deadline. Reporting Entity details re-verified each year — group restructurings, new acquisitions, or a change in Surrogate Parent nomination all require an updated Notification. | Notification is separately penalised from the Report. A group that files a perfect Report but misses or errs in the Notification still faces an administrative penalty — this is the single most common CbCR compliance gap PNPC sees on first review of a new client's history. |
| Annual Report Preparation & Filing | Fiscal year end, with the twelve-month filing clock running from that date | Data collection timeline built backward from the statutory deadline, not forward from when audited accounts happen to be ready. Table 1 and Table 2 reconciled against the group's consolidation package and prior-year filing for consistency. | Waiting for finalised audited financial statements before starting data collection routinely compresses the available filing window to a few weeks, increasing the risk of a rushed submission with XML errors or data inconsistencies that trigger portal rejection close to the deadline. |
| XML Validation & Submission | Data package complete, ready for MoF portal upload | Schema validation performed against the OECD CbC XML Schema before the file ever reaches the MoF portal — currency codes, jurisdiction codes, entity identifiers, and the MessageSpec structure checked line by line. | A rejected upload close to the deadline, with no time buffer built in, can push the actual submission past the statutory filing date — converting what should have been a clean filing into a late filing with penalty exposure. |
| Post-Filing Retention & Corporate Tax Alignment | CbCR submitted and acknowledged by MoF | Acknowledgement receipts and the final XML retained as part of the permanent Corporate Tax compliance file. Report figures cross-checked against the entity's own UAE Corporate Tax return and, where applicable, its Master File/Local File narrative for internal consistency. | A CbCR that is inconsistent with the entity's Corporate Tax return or transfer pricing documentation is a documented audit-selection risk — inconsistencies discovered by the FTA or a foreign tax authority years later are materially harder and costlier to explain than ones resolved before submission. |
| Automatic Exchange of Information | MoF exchanges the filed CbCR with partner tax administrations under the MCAA on the Exchange of CbC Reports | PNPC briefs the group on which partner jurisdictions will receive the filed CbCR based on the group's own footprint, so management understands the report's reach is not limited to the UAE. | A CbCR showing profit concentrated in a low-tax, low-substance jurisdiction is a standard risk-selection flag used by tax authorities globally, including India's — an inconsistency that surfaces first in a foreign jurisdiction's audit can still trigger a UAE-side FTA enquiry. |
| Restatement, Amendment, or Reporting Entity Change | Consolidated accounts restated, error identified post-filing, or group restructuring changes the Reporting Entity | Amendment filed through the same MoF portal process with a documented change log — what changed, why, and the effective date — so the compliance file explains any discrepancy between filed versions if queried later. | An unexplained discrepancy between two filed versions of the same fiscal year's CbCR, without a documented reason, reads as an inconsistency rather than a correction during any subsequent review. |
| Group Falls Below Threshold | Consolidated revenue drops below the prescribed threshold in a subsequent fiscal year, e.g. following divestment | Threshold re-test performed each year regardless of prior filing history — PNPC confirms in writing when the obligation ceases rather than leaving the client to assume it based on the prior year's filing. | Filing a Notification or Report in a year when no obligation exists is not harmful in itself, but relying on an assumption either way — filing unnecessarily or skipping a required filing — both carry avoidable cost and risk without a documented annual re-test. |
What exactly is a Country-by-Country Report, and who administers it in the UAE?
It is an annual report required under the OECD's BEPS Action 13 framework, breaking down a multinational group's revenue, profit before tax, tax paid and accrued, capital, earnings, headcount, and tangible assets on a jurisdiction-by-jurisdiction basis. In the UAE it is governed by Cabinet Resolution No. 44 of 2020 (as amended) and administered by the Ministry of Finance (MoF) — not the Federal Tax Authority, which handles VAT and Corporate Tax. Filing happens on a separate MoF portal from EmaraTax.
What is the revenue threshold that triggers a CbCR obligation for a UAE group?
The obligation applies where the MNE Group's total consolidated group revenue in the immediately preceding fiscal year meets or exceeds the threshold prescribed under Cabinet Resolution No. 44 of 2020 and related Ministerial Decisions — a figure aligned with the OECD's own recommended CbCR threshold. Because the exact figure is periodically confirmed and can be expressed differently depending on reporting currency, PNPC confirms the applicable threshold against the current Cabinet Resolution and Ministerial guidance at the start of every engagement rather than relying on a remembered figure from a prior year.
Is the threshold based on the UAE entity's turnover or the whole group's revenue?
The whole group's consolidated revenue — not the UAE entity's standalone turnover. A UAE subsidiary with modest local revenue sitting inside a large global group can still trigger a CbCR obligation for the group, and the UAE entity may still owe an annual Notification even if it is not the entity that files the full Report.
What is the difference between the CbCR Notification and the CbCR Report itself?
The Notification is a shorter annual filing identifying the Reporting Entity, its tax jurisdiction, and the UAE entity's role in the group — due earlier in the cycle. The Report is the full XML Schema-formatted document containing the jurisdiction-by-jurisdiction financial data, due within twelve months of the fiscal year end. They are assessed and penalised as two separate obligations — completing one does not satisfy the other.
Does every UAE entity in a large multinational group have to file the full CbCR?
No. Only the Reporting Entity — typically the Ultimate Parent Entity, or a nominated Surrogate Parent Entity — files the full Report. A UAE entity that is merely a Constituent Entity (neither the parent nor the surrogate) still has an annual Notification obligation confirming who is filing on the group's behalf and where, but does not itself submit the full XML Report.
What is a Surrogate Parent Entity and why would a UAE entity be nominated as one?
A Surrogate Parent Entity is a group entity nominated to file the CbCR centrally on behalf of the whole group, in place of the Ultimate Parent Entity — often used where the UPE's home jurisdiction lacks an effective CbCR exchange arrangement with all the jurisdictions the group operates in, or where the group prefers to centralise filing in a single, well-understood jurisdiction. A UAE entity can be nominated as Surrogate Parent, in which case it takes on the full Report filing obligation.
What financial figures actually go into the CbCR?
For each jurisdiction the group operates in: revenue split between related-party and unrelated-party, profit (loss) before income tax, income tax paid on a cash basis, income tax accrued for the current year, stated capital, accumulated earnings, number of employees, and tangible assets other than cash and cash equivalents. This is Table 1 of the CbCR. Table 2 lists every constituent entity by jurisdiction and its main business activity.
What is the XML Schema, and why does it matter so much for CbCR filing?
The CbCR must be submitted in the OECD's prescribed CbC XML Schema format — a structured, machine-readable file format, not a spreadsheet or PDF. The MoF portal validates every submission against this schema, and errors — wrong currency codes, malformed jurisdiction codes, an incomplete MessageSpec header, inconsistent entity identifiers — cause an outright rejection on upload rather than a query for clarification.
What happens if the XML file is rejected close to the filing deadline?
A rejected upload is not treated as a timely filing — the obligation remains open until a valid submission is accepted by the portal. If the rejection happens close to or after the statutory deadline, the group is at risk of a late-filing penalty even though a submission attempt was made in good time. This is why building in a buffer before the actual deadline, not filing on the deadline itself, is standard PNPC practice.
How long does the whole CbCR filing engagement typically take?
For a first-time filer with consolidated financial data available at the start, a realistic timeline is six to eight weeks from data collection kickoff to validated XML submission — covering Reporting Entity confirmation, data collection, Table 1 and Table 2 preparation, schema validation, and submission. The Notification, which has its own earlier deadline, is filed separately and earlier in the cycle.
What penalties apply for late or incorrect CbCR filing in the UAE?
Cabinet Resolution No. 44 of 2020 and the UAE's administrative penalty framework for CbCR non-compliance prescribe penalties for late filing of the Notification, late filing of the Report, and for filing incomplete or incorrect information — assessed as separate, independent breaches. Because the specific penalty amounts are set by Cabinet/Ministerial decision and have been updated since the framework's introduction, PNPC confirms the current schedule with the client rather than quoting a fixed figure that may be out of date.
Our group is above the threshold but we've never filed a CbCR notification or report — what do we do?
This happens more often than groups expect, typically where a UAE subsidiary's finance team was unaware that group-consolidated revenue (not local revenue) triggers the obligation. PNPC's first step is a factual determination — confirming the threshold was in fact crossed, in which fiscal year, and the UAE entity's role — followed by a plan to bring the filing current, which may include voluntary disclosure to the MoF depending on how the delay arose.
Does CbCR filing replace the need for transfer pricing documentation (Master File and Local File)?
No. CbCR is one of three tiers in the OECD's transfer pricing documentation standard. The Master File and Local File — required separately under the UAE Corporate Tax Law (Federal Decree-Law No. 47 of 2022) and its related Ministerial Decisions once an entity meets the relevant thresholds — contain the group's value chain narrative and the transaction-level arm's-length analysis. A CbCR filing engagement does not include Master File/Local File preparation; PNPC treats that as a related but separate engagement.
Who is the 'Reporting Entity' and how is it determined?
The Reporting Entity is the group entity legally obligated to file the full CbCR — by default, the Ultimate Parent Entity in its jurisdiction of tax residence, unless a Surrogate Parent Entity has been validly nominated. Determining Reporting Entity status requires confirming the group's actual ownership chain, the UPE's tax residence, and whether that jurisdiction has an effective and current CbCR exchange arrangement with the UAE.
Our Ultimate Parent Entity is in India — does the UAE subsidiary still have obligations?
Yes, typically a Notification. Even where an Indian UPE files the full CbCR under India's Rule 10DB regime (Form 3CEAD) and India has an effective exchange arrangement with the UAE, the UAE Constituent Entity generally still owes its own annual CbCR Notification to the MoF, confirming that the Indian entity is the Reporting Entity. PNPC's India and Dubai desks coordinate this so the Indian Form 3CEAC/3CEAD filings and the UAE Notification are consistent.
Our UAE entity is the Ultimate Parent Entity but has group subsidiaries in India — what does that mean for filing?
The UAE entity, as UPE, files the full CbCR Report and Notification with the MoF, covering the Indian subsidiaries' data as part of the group-wide Table 1 and Table 2. The Indian subsidiaries, in turn, typically have their own Notification obligation under India's Rule 10DB confirming that the UAE entity is the Reporting Entity — mirroring the UAE's own Notification logic in reverse. PNPC coordinates both sides so the group files consistently in both jurisdictions.
What if our group's fiscal year doesn't align with the UAE Corporate Tax period?
The CbCR filing deadline runs from the group's own consolidated fiscal year end — twelve months from that date for the Report — which may differ from the UAE entity's own Corporate Tax period if the group uses a non-calendar consolidated year. PNPC tracks both calendars separately for clients where they diverge, since conflating the two is a common source of missed deadlines.
How does PNPC source the jurisdiction-by-jurisdiction financial data for Table 1?
From the group's own consolidation package — the same underlying data used to prepare consolidated financial statements — rather than from local trial balances aggregated independently. This ensures the CbCR figures reconcile to the group's audited or management consolidated accounts, which is what a reviewing tax authority will check first if the CbCR is ever queried.
Can we include an explanatory note in the CbCR if a figure looks unusual — for example, a one-off restructuring gain?
Yes. The OECD CbC XML Schema (and the MoF's implementation of it) includes an Additional Information section for free-text narrative explaining figures that would otherwise appear anomalous — a one-off gain, an unusual headcount movement following an acquisition, or a jurisdiction with disproportionate profit relative to headcount for a documented reason. Using this section proactively is good practice, not an admission of a problem.
Is the CbCR made public, or shared with our competitors?
No. The CbCR is filed confidentially with the Ministry of Finance and exchanged only between tax administrations under the Multilateral Competent Authority Agreement (MCAA) on the Exchange of CbC Reports — not published, and not disclosed to third parties or competitors. It is a government-to-government exchange for tax risk-assessment purposes.
What happens to our CbCR data after we file it with the MoF?
The MoF exchanges the filed CbCR automatically with the tax administrations of the jurisdictions in which the group has constituent entities, under the MCAA framework, provided an effective exchange relationship exists with each. Those foreign tax authorities use the CbCR primarily as a risk-assessment tool to decide which groups warrant closer transfer pricing scrutiny — it is not itself a transfer pricing audit finding, but it is a well-established trigger for one.
We restated our consolidated financial statements after filing the CbCR — do we need to refile?
In most cases, yes — a material restatement of the consolidated financial statements underlying an already-filed CbCR should be reflected through an amended filing with the MoF, together with a clear explanation of what changed and why. PNPC manages this through the same portal process used for the original filing, with a documented change log.
What is the Multilateral Competent Authority Agreement (MCAA) and why does it matter for our filing?
The MCAA on the Exchange of CbC Reports is the international framework under which signatory tax administrations, including the UAE's, automatically exchange CbCRs filed in their jurisdiction with the tax administrations of every jurisdiction in which the filing group has a constituent entity. It is the mechanism that turns a single UAE filing into a document visible to multiple foreign tax authorities.
Does the UAE Corporate Tax regime change anything about our CbCR obligations?
CbCR filing itself remains governed by Cabinet Resolution No. 44 of 2020 and administered by the MoF, separate from UAE Corporate Tax under Federal Decree-Law No. 47 of 2022 administered by the FTA. However, the introduction of Corporate Tax has raised the practical stakes of CbCR accuracy, since a UAE entity's Corporate Tax return, its transfer pricing documentation (where required), and its CbCR figures are now all data points the FTA can cross-reference for the same entity.
Can PNPC help us determine whether our group even meets the CbCR threshold, before engaging for the full filing?
Yes. A threshold and Reporting Entity determination is typically a short, focused piece of work — reviewing the group's consolidated revenue figure and ownership chain against the current Cabinet Resolution and Ministerial guidance — that we scope and price separately from the full filing engagement. Many clients start here before committing to the full data-collection and submission process.
What if our group has entities in jurisdictions that don't have an effective CbCR exchange relationship with the UAE?
Where an effective exchange relationship does not exist between the UAE and a particular constituent jurisdiction, that can affect the Reporting Entity analysis and, in some cases, trigger a 'local filing' requirement in the affected jurisdiction instead of relying purely on exchange from the UAE filing. This is assessed on a jurisdiction-by-jurisdiction basis as part of the Reporting Entity determination.
How does PNPC price a CbCR filing engagement?
PNPC scopes and quotes a fixed fee for the CbCR filing engagement — covering threshold confirmation, Notification filing, data collection support, Table 1/Table 2 preparation, XML validation, and submission — agreed in writing before work begins. Pricing depends on the number of jurisdictions in the group, the state of the group's consolidation data, and whether this is a first-time filing or a recurring annual engagement.
Is CbCR filing something our in-house finance team can do without a CA firm?
Technically, yes, if the team has the OECD CbC XML Schema expertise, MoF portal familiarity, and bandwidth to run threshold testing and Reporting Entity determination correctly. In practice, most groups engage a CA firm because the schema formatting is unforgiving, the Notification-versus-Report distinction is easy to miss internally, and the exchange consequences of an error are not visible until a foreign tax authority raises a query years later.
What records does PNPC keep after the CbCR is filed?
The MoF portal acknowledgement receipts for both the Notification and the Report, the final validated XML file as submitted, a version history if any amendment was filed, and the correspondence trail with the MoF. This becomes part of the client's permanent Corporate Tax and transfer pricing compliance file, retrievable for any future FTA or MoF enquiry.
Does a small UAE Free Zone entity ever have a CbCR obligation?
Free Zone status does not exempt an entity from CbCR — the obligation is driven by the group's consolidated revenue and the entity's role (UPE, Surrogate, or Constituent), not by whether the UAE entity itself is a Qualifying Free Zone Person for Corporate Tax purposes. A Free Zone entity that is the Ultimate Parent of a large group, or simply a Constituent Entity within one, has the same CbCR obligations as a Mainland entity in the same role.
What if the group only just crossed the threshold this year because of an acquisition?
An acquisition that pushes the group's consolidated revenue over the prescribed threshold triggers the CbCR obligation from that fiscal year onward, based on the new consolidated figure. PNPC recommends re-testing the threshold at every material acquisition or divestment, not just at the routine annual review, since the obligation can arise mid-cycle in ways that are easy to miss if the finance team is focused on integration rather than CbCR compliance.
How does the CbCR filing interact with the UAE's Economic Substance Regulations (ESR)?
They are separate regimes with separate legal bases, and it matters that clients not conflate them. CbCR runs under Cabinet Resolution No. 44 of 2020, administered by the MoF. Economic Substance Regulations, by contrast, were discontinued for financial years starting on or after 1 January 2023 under Cabinet Decision No. 98 of 2024 — UAE entities no longer have an ongoing ESR notification or report filing obligation for those later years, though historic ESR filings for earlier financial years remain part of the compliance record. CbCR is unaffected by the ESR discontinuation and continues as an independent, live annual obligation for groups above the revenue threshold.
Can PNPC file the CbCR if our group's accounts are prepared in a currency other than AED or USD?
Yes. The CbC XML Schema requires the reporting currency to be specified and applied consistently across the filing, and PNPC handles the currency and exchange rate convention as part of data preparation — including documenting the basis used where different jurisdictions in the group report in different local currencies before consolidation.
What if we discover, mid-engagement, that we are not actually the Reporting Entity?
This happens, particularly in groups with complex or recently restructured ownership chains. PNPC's Reporting Entity determination step is designed to catch this before Notification filing, but if it surfaces mid-engagement, we redirect the client's UAE entity to the correct Notification-only filing (confirming the actual Reporting Entity) rather than continuing to prepare a full Report that was never the UAE entity's obligation to file.
Does PNPC also advise on whether our transfer pricing policy is defensible, or only handle the filing?
This filing engagement is scoped around the mechanics of Notification and Report submission. Assessing whether the group's intercompany pricing would withstand transfer pricing scrutiny — the Master File narrative, Local File benchmarking, arm's-length analysis — is a related but separate advisory engagement PNPC also provides. We flag to every CbCR filing client where their CbCR figures suggest a transfer pricing conversation is worth having, but the two engagements are scoped and priced independently.
Why should we use PNPC instead of handling CbCR filing through our group's existing Big Four or international advisor?
Many groups already have a centralised CbCR process run by an international advisor at the group level. PNPC's role in that scenario is typically the UAE-local piece — confirming the UAE entity's specific Notification obligation, ensuring UAE-side portal registration and filing is executed correctly and on the UAE's own deadlines, and coordinating the India-side leg where the group also has Indian entities. For groups without a centralised process, or where the UAE entity is itself the Reporting Entity, PNPC runs the full engagement directly.
What does PNPC's CbCR filing engagement include, in full?
Threshold testing against current consolidated revenue and the prescribed Cabinet Resolution threshold. Reporting Entity determination in writing. MoF portal registration for the responsible UAE entity. CbCR Notification preparation and filing. Consolidated data collection support and reconciliation to the group's consolidation package. Table 1 and Table 2 preparation. OECD CbC XML Schema validation. Report submission on the MoF portal. Retention of all acknowledgement receipts and correspondence. Cross-check of CbCR figures against the entity's Corporate Tax return and, where applicable, its transfer pricing documentation. India-side coordination for groups with Indian group entities. Following-year filing calendar setup.
PNPC CbCR filing engagement vs typical alternatives
| Consideration | PNPC Dubai (CA-led) | In-house finance team (first attempt) | Generic compliance portal/software-only tool |
|---|---|---|---|
| Reporting Entity determination | Confirmed in writing before any filing work starts, based on actual ownership chain and jurisdiction exchange status | Often assumed rather than formally verified, especially in complex or recently restructured groups | Not addressed — tools assume the determination has already been made correctly |
| Notification vs Report distinction | Tracked and filed as two independent, separately-deadlined obligations from Day 1 | Frequently conflated — Notification obligation missed when only the Report is on the radar | Depends entirely on the user knowing to file both — the tool does not flag the distinction |
| XML Schema validation | Validated against the OECD CbC XML Schema before MoF portal submission, catching errors pre-emptively | Learned by trial and error, often through a rejected upload close to the deadline | Varies by tool — some validate, many do not catch UAE-specific portal quirks |
| Data sourcing | Built from the group's consolidation package, reconciled to consolidated financial statements | Sometimes aggregated from local trial balances, which rarely ties out cleanly to group accounts | Requires the user to input already-reconciled figures — provides no reconciliation support |
| Cross-check against Corporate Tax and transfer pricing | Figures checked for consistency against the entity's Corporate Tax return and Master File/Local File narrative | Rarely performed — different teams often handle CbCR and Corporate Tax without cross-referencing | Not offered — outside the scope of a filing tool |
| India-UAE group coordination | India and Dubai desks coordinate Rule 10DB filings with UAE Notification/Report for shared-group entities | Requires the client to manage two separate advisors and reconcile their positions independently | Not offered — single-jurisdiction tool |
| Deadline buffer discipline | Submission targeted with a buffer ahead of the statutory deadline to absorb any rejection/resubmission cycle | Frequently attempted close to or on the deadline itself, with no buffer for correction | No deadline management — the tool files whenever the user submits, correct or not |
| Post-filing record retention | Full acknowledgement, XML, and correspondence trail retained as part of the permanent compliance file | Often not systematically retained beyond the immediate filing | Limited to whatever the software's own storage retains, if the subscription continues |
What the PNPC package includes
- 01
Threshold testing against the group's actual consolidated revenue and the current Cabinet Resolution threshold
- 02
Written Reporting Entity determination — Ultimate Parent, Surrogate Parent, or Constituent Entity
- 03
MoF CbCR portal registration for the responsible UAE entity
- 04
CbCR Notification preparation and filing, tracked on its own independent deadline
- 05
Consolidated data collection support, reconciled to the group's consolidation package
- 06
Table 1 (jurisdiction financial data) and Table 2 (constituent entity list) preparation
- 07
OECD CbC XML Schema validation before submission
- 08
Report submission on the MoF portal with a deadline buffer built in
- 09
Cross-check of CbCR figures against Corporate Tax return and transfer pricing documentation, where applicable
- 10
India-side coordination for groups with Indian parent or subsidiary entities under Rule 10DB
- 11
Full acknowledgement and correspondence retention as part of the permanent compliance file
- 12
Following-year filing calendar setup so CbCR does not become a one-off exercise
If your group has crossed the CbCR threshold — or you are not certain whether it has — talk to PNPC's Dubai desk before the Notification deadline, not after a portal rejection or an MoF query forces the conversation.
Jurisdiction
Free zone, mainland & offshore
Ready to get started?
Tell us about your requirement — a UAE specialist responds within 24 hours.