Employment in Financial Services

The UAE has four different regulators responsible for the authorisation and supervision of banks, insurers, and other financial institutions.

There are two regulators "on-shore" in the UAE, namely, (i) the UAE Central Bank, which is the state institution responsible for banking and insurance regulation, as well as monetary policy, and has authority over all licensed financial institutions in the UAE, including those in the financial free zones; and (ii) the Emirates Securities and Commodities Authorities (ESCA)  that regulates markets, listed companies, and securities brokers.

There are two financial free zones in the UAE, the Dubai International Financial Centre (DIFC) and Abu Dhabi Global Market (ADGM), who were established as special economic zones with independent jurisdictions through amendment to the UAE Constitution.  Within the free zones, the Dubai Financial Services Authority (DFSA) is the regulator of the DIFC and the Financial Services Regulatory Authority (FSRA) is the regulator of the ADGM.

As the DIFC and ADGM free zones have been established as special economic zones in which financial services are conducted, most of the applicable legislation in the UAE which governs financial services is found in the two free zones.  Therefore, unless expressly referenced, the responses for the UAE in this guide consider the position in the DIFC and ADGM only.

The Dubai Financial Services Authority is the financial regulatory body of financial services conducted in or from the DIFC.  The key legislation is the Regulatory Law of 2004, as amended, which is administered by the DFSA and is described as the cornerstone legislation of the regulatory regime.

The ADGM Financial Services Regulatory Authority is the financial regulatory body of financial services conducted in or from the ADGM.  The key legislation is the Financial Services and Markets Regulations (FSMR), which sets out the legislative and regulatory framework for financial services in the ADGM.  The FSMR was modelled on the UK’s Financial Services and Markets Act 2000 and other related legislation.

Finally, all employees in the private sector (excluding the two financial free zones) are subject to Federal Decree-law No. 33 of 2021, as amended (the Labour Law).  In the DIFC, employees are subject to DIFC Law No. 2 of 2019, as amended (the DIFC Employment Law) and in the ADGM, employees are subject to the ADGM Employment Regulations 2019 (the ADGM Employment Regulations).  In addition to the employment legislation described above, a number of other laws will be applicable to employees in the UAE, including Federal Decree-law No. 30 of 2021 containing the Penal Code.

In the UK, there are two main regulators responsible for the supervision of financial institutions. These are:

• The Prudential Regulation Authority (the PRA) – The PRA supervises over 1,500 financial institutions, including banks, building societies, credit unions, insurance companies and major investment firms. It creates policies for these institutions to follow and watches over aspects of their business.
• The Financial Conduct Authority (the FCA) – The FCA regulates the conduct of approximately 50,000 firms, prudentially supervises 48,000 firms, and sets specific standards for around 18,000 firms.

Some financial institutions are regulated by both the PRA and FCA (dual-regulated). Those financial institutions must comply with rules set down by the PRA in its rulebook (the PRA Rulebook) and by the FCA in its handbook (the FCA Handbook). Other firms are regulated solely by the FCA (solo-regulated) and must comply with the FCA handbook alone. Different rules can apply depending on the nature and size of the firm. The PRA and FCA work closely on certain issues and firms, but the FCA focuses specifically on ensuring fair outcomes for consumers.

The Senior Managers and Certification Regime (SM&CR) sets out how the UK regulators oversee people in businesses supervised and regulated by them, and how those people must act. As the FCA has summarised, “The SM&CR aims to reduce harm to consumers and strengthen market integrity by making individuals more accountable for their conduct and competence” (https://www.fca.org.uk/firms/senior-managers-certification-regime).

SM&CR consists of three elements:

• The Senior Managers Regime (SMR) – This applies to the most senior people in a firm (senior managers) who perform one or more senior management functions (SMFs). These functions are specified in the PRA Rulebook and the FCA Handbook. Senior managers must be pre-approved by the PRA or FCA before starting their roles. Each senior manager must also have a “Statement of Responsibilities” (that sets out what they are responsible and accountable for), which may include (depending on the firm) certain responsibilities prescribed by the regulator known as “Prescribed Responsibilities”. Every year, senior managers must be certified as fit and proper to carry out their role by their firm.
• The Certification Regime (CR) – This applies to employees who, because of their role, could pose a risk of significant harm to the firm or its customers, such as employees who offer investment advice (certified staff). For solo-regulated firms, these roles are generally called certification functions. Firms must certify that these employees are fit and proper for their roles both at the outset of their employment and continuously.
• The Conduct Rules – The Conduct Rules set minimum standards of individual behaviour in financial services in the UK. They apply to almost all employees of a firm. They also include particular rules applicable only to senior managers.

Certain parts of SM&CR apply to particular firms only. This is outside the scope of this note, which sets out the general position under SM&CR.

There is no public register of authorised individuals.

The FCA maintains a public list of authorised firms and the activities for which each firm has permission. This list is known as the Financial Services Register. The register also includes a directory of certified and assessed persons working in financial services – this includes for each firm (as applicable) senior managers; certified staff; directors (executive and non-executive) who are not performing SMFs; and other individuals who are sole traders or appointed representatives.

Firms are responsible for keeping the directory up to date. Firms must report certain information to the FCA about persons included in the register and directory, including information on an individual's role, their workplace location, and the types of business they are qualified to undertake. The FCA provides guidance and Q&As to assist firms with navigating the register and directory.