The Complete Guide to UAE Climate Law Compliance for SMEs and Free Zone Businesses

You found out your Free Zone is not exempt. Maybe a lawyer mentioned it in passing, or a client asked whether you have started measuring emissions. Either way, the assumption most UAE SME leaders made when Federal Decree-Law No. (11) of 2024 was announced, that it applies to large industrial conglomerates and certainly not to a trading company in DMCC or a logistics operation in JAFZA, turns out to be incorrect.

The law came into full effect on 30 May 2025. It applies to every public and private entity in the UAE whose operations generate greenhouse gas emissions. That means mainland companies, Free Zone companies, and businesses of every size. The full compliance deadline for all entities is 30 May 2026.

For Finance Directors and Operations Managers at UAE SMEs, this creates four concrete obligations that must be operationalised before that deadline: measuring your Scope 1 and 2 emissions, implementing a monitoring and reporting system, submitting an emissions reduction plan, and documenting your climate risk assessment.

This guide explains exactly what each obligation means, what it requires in practice, and what the financial and commercial consequences of non-compliance look like. It is written for commercially-minded leaders who need to understand what to do, not for sustainability specialists.

This guide covers:

• What the law is and who it covers

• The four core obligations every SME must meet

• A step-by-step approach to building each requirement

• Common mistakes that create audit exposure

• How early movers are turning compliance into a commercial advantage

What Is Federal Decree-Law No. (11) of 2024?

Federal Decree-Law No. (11) of 2024 on the Reduction of Climate Change Effects is the UAE's first comprehensive legislation making corporate climate accountability a legal obligation rather than a voluntary commitment. It was adopted in August 2024, published in Official Gazette No. 782, and entered into force on 30 May 2025.

The law operationalises the UAE's Net Zero 2050 national strategy by requiring businesses to measure, report, and reduce their greenhouse gas (GHG) emissions. Crucially, it does not allow entities to self-certify or rely on rough estimates. Data must be collected systematically, maintained for at least five years, and submitted through a government-recognised monitoring, reporting and verification (MRV) system.

This is not a disclosure framework of the kind that lists companies have navigated for years, where non-compliance carries reputational risk. It is a legally enforceable regulation with financial penalties, potential licence suspension, and exclusion from government procurement. The shift from voluntary to mandatory is complete.

Key dates at a glance:

• 30 May 2025: Law enters into force. All entities must begin measurement activities.

• 28 June 2025: Registration deadline for Huge Carbon Emission Entities (HCEEs) in the National Register for Carbon Credits.

• 30 May 2026: Full compliance required. MRV systems must be operational, baseline inventory submitted, and reduction plan active.

Why Does This Matter for Your Business?

There are three distinct business risks created by this law. Understanding all three is what separates a Finance Director who builds the right compliance infrastructure from one who reacts too late.

Regulatory and Financial Risk

The penalty structure is aggressive. Under Articles 15 and 16 of the law, non-compliance carries fines ranging from AED 50,000 to AED 2,000,000 per violation. If the same violation is repeated within two years, those fines double, reaching a maximum of AED 4,000,000.

Beyond fines, the law permits competent authorities to impose licence suspension, operational activity restrictions, and exclusion from government procurement as administrative measures. These are not theoretical consequences that require a court order. They are regulatory tools available to enforcement bodies under the statute.

Supply Chain and Procurement Risk

Even if you believe your own emissions profile is modest, your customers will force your hand. Large multinationals operating in the UAE are subject to international regulations that require them to report Scope 3 emissions, which includes the emissions generated by their suppliers. If you cannot provide verified emissions data when asked, you risk being removed from procurement rosters.

This pressure is already materialising. According to a Bain and Company survey, 49% of UAE businesses plan to drop suppliers who cannot demonstrate ESG compliance by 2028. That is not a distant projection. Companies are already building ESG clauses into new supplier contracts.

Access to Finance

UAE banks are actively integrating climate risk into credit assessments. The UAE Central Bank has committed AED 1 trillion in sustainable finance by 2030, and the country's major banks are embedding ESG scoring into lending decisions. Businesses with verified emissions data and clear reduction plans are positioned to access sustainability-linked loan products at more favourable rates. Those without data infrastructure are increasingly categorised as higher-risk borrowers.

Who Must Comply? The No-Exemption Rule

The most consequential misunderstanding about this law is that it contains carve-outs based on company location, size, or sector. It does not.

Free Zones Are Not Exempt

The law defines its scope through the concept of 'sources,' meaning all public and private legal persons and individual enterprises whose activities generate greenhouse gas emissions. Legal analysis by multiple UAE law firms confirms that this definition encompasses every Free Zone entity in the country, including those registered in JAFZA, DMCC, ADGM, DIFC, RAKEZ, KIZAD, and all other zones. There is no carve-out article, no Free Zone annex, and no size-based exemption.

This was not how the law was initially received by many SME leaders. The assumption that Free Zone status conferred some form of regulatory insulation from federal environmental legislation was widespread. The law settled that question definitively.

Company Size Is Not a Threshold

The law does distinguish between entity types, but not in the way many businesses expect. Entities whose combined Scope 1 and Scope 2 emissions reach at least 0.5 million tonnes of CO2-equivalent per year are designated as Huge Carbon Emission Entities (HCEEs) under Cabinet Resolution No. (67) of 2024. These entities face accelerated obligations, including mandatory registration in the National Register for Carbon Credits by 28 June 2025 and annual third-party verified GHG reporting.

The key point for SME leaders: the HCEE threshold is the dividing line between two tiers of obligation, not the dividing line between who must comply and who does not. A trading company in DMCC emitting 5,000 tonnes of CO2 per year is not a HCEE, but it is still legally obligated to measure emissions, build an MRV system, submit a reduction plan, and conduct a climate risk assessment. The obligations are real for every entity.

In plain terms: If your business operates in the UAE and consumes electricity, runs a vehicle fleet, uses diesel generators, or occupies premises with district cooling, you have emissions to measure. The law applies to you.

Your Four Core Obligations Under the Law

The law creates four operational requirements that every covered entity must meet by 30 May 2026. Each one requires deliberate action now, not in the months before the deadline.

Step 1: Build Your GHG Emissions Inventory

An emissions inventory is a complete account of the greenhouse gases your business produces, categorised by source. For most UAE SMEs, this means accounting for two categories of emissions.

Scope 1: What You Burn or Release Directly

Scope 1 emissions come from sources your business owns or controls. For a UAE SME, the most common Scope 1 sources are fuel combustion in owned or leased fleet vehicles, diesel burned in on-site generators, and refrigerant leakage from air conditioning and cooling systems. If your operations involve any manufacturing process that burns fuel or produces process gases, those are Scope 1 as well.

Scope 2: What You Buy as Energy

Scope 2 covers the indirect emissions from energy you purchase. In the UAE context, this means electricity purchased from your utility provider and district cooling services. District cooling is treated as a purchased energy service and therefore falls under Scope 2, not Scope 1. This distinction matters because many UAE businesses in modern commercial buildings rely heavily on district cooling, and it must be included in their emissions calculation.

Calculating Your Inventory

The law references IPCC guidelines and what advisory firms consistently describe as GHG Protocol-aligned inventory standards. In practice, this means collecting activity data (fuel volumes, electricity consumption in kWh, cooling consumption) and multiplying by appropriate emission factors.

For electricity from DEWA, a verified emission factor of 0.4041 kg of CO2 per kWh has been used by UAE corporate operators for Scope 2 calculations, based on DEWA's own climate reporting. Abu Dhabi utilities operate under their own developing factor guidance. No single national grid emission factor has been mandated by MOCCAE as of early 2026, so the article recommends using your utility provider's most recently published factor.

The starting point for most SMEs is straightforward: pull 12 months of utility bills, fuel receipts, and fleet odometer logs. That data contains the raw material for your first emissions inventory. The complexity lies not in finding the data but in centralising it across departments that have never shared it before.

The Old Way A finance manager at a JAFZA-based logistics company receives a compliance notice in April 2026. She starts asking department heads for fuel logs. The fleet manager has six months of receipts in a drawer. The facilities team has utility bills split across three different email inboxes. The generator diesel records are with the maintenance contractor. Six weeks later, she has a partial spreadsheet that the external verifier rejects for missing data and inconsistent units. The company misses the May deadline. Fines begin.

The New Reality The same company spent two days in June 2025 assigning a single data owner in finance and building a simple centralised log. By December 2025, they had a full year of Scope 1 and 2 data, consolidated in one place. When the verifier arrived, the audit took three days rather than six weeks. The baseline was submitted on time and the company used the verified data in their response to a new client RFP asking about emissions.

Step 2: Implement Your MRV System

An MRV system is the ongoing process by which you monitor emissions continuously, report them to the relevant authority, and have that data verified by a qualified third party. It transforms a one-time inventory exercise into a repeatable operational process.

MOCCAE has developed the Integrated Emission Quantification Tool (IEQT) as the national MRV transparency platform, initially launched in December 2023 as part of the UAE's National MRV Transparency System. Legal commentary from late 2025 positions the IEQT as the central system through which entity-level data will ultimately feed into the national registry. However, as of early 2026, no official MOCCAE guidance has been published specifying how individual SMEs register or submit data through the IEQT at a technical level. This is an area to monitor closely as implementing regulations continue to be issued.

What the Law Requires in Practice

The law requires that your emissions data be collected against an approved methodology (aligned with IPCC and GHG Protocol standards), that records be maintained for at least five years, and that the data be verifiable by a Ministry-authorised agency. For HCEEs, third-party verification is explicitly mandatory. For non-HCEE entities, the verification requirement is implied by the law's emphasis on data integrity and audit readiness, but the specific verification obligations for smaller entities are still being clarified in implementing regulations.

No regulation explicitly prohibits a spreadsheet-based MRV approach for smaller entities. However, the law's emphasis on data integrity, audit trails, and verifiability creates a practical pressure toward more robust systems. A spreadsheet with no version control, no audit trail, and no automatic validation of emission factors is difficult to defend in a regulatory review.

What to Build Now

For most UAE SMEs, the MRV system does not need to be complex at this stage. The minimum viable approach is a centralised data repository with a single assigned owner, consistent input templates for each emission source, clearly documented emission factors and their sources, and a record of each data entry including who submitted it and when.

As MOCCAE finalises its implementing regulations and the IEQT becomes fully operational for entity-level reporting, SMEs that have built clean, structured data processes will transition to the national system quickly. Those relying on ad-hoc spreadsheets across multiple departments will face the same scramble they experienced during the first inventory collection.

Step 3: Prepare Your Emissions Reduction Plan

The law requires covered entities to submit a reduction plan aligned with national emission-reduction targets. The UAE's Third Nationally Determined Contribution (NDC 3.0), submitted in November 2024, commits the country to reducing national emissions by 47% by 2035 relative to a 2019 baseline.

What Has Been Published

At a national level, the NDC 3.0 provides sector-level discussion of the energy, industry, transport, buildings, waste, and agriculture pathways that will contribute to the 47% target. The law states that the UAE government will set annual emission-reduction targets for all industry sectors and review them periodically.

What Has Not Yet Been Published

As of early 2026, no binding, quantitative reduction targets specific to SME-relevant sectors such as general logistics, trading, light manufacturing, or professional services have been published by MOCCAE. This is a genuine regulatory gap. The implementing regulations that will define exactly what a compliant reduction plan looks like for a 50-person logistics company in a Free Zone versus a 200-person manufacturer in a mainland industrial zone are still being developed.

This does not mean SMEs should wait. It means the reduction plan submitted in 2026 will need to demonstrate intent and a credible trajectory, even if sector-specific quotas have not yet been codified. A reduction plan that documents your baseline, identifies your largest emission sources, sets internal targets for reduction, and describes the operational actions you will take is far stronger than submitting nothing.

Practical starting point: Use your completed emissions inventory to identify your top three emission sources by volume. For a logistics company, that is likely fleet fuel consumption. For an office-based business, it is likely purchased electricity and cooling. Document what actions you will take to reduce each, with a timeline. This is not a marketing document. It is an operational plan.

Step 4: Conduct Your Climate Risk Assessment

The fourth obligation under the law requires entities to assess how climate change could affect their business operations and to document what they are doing about it. For many SME leaders, this is the least familiar of the four requirements, and it is often the last one addressed.

What a Climate Risk Assessment Covers

A climate risk assessment examines two categories of risk. Physical risks are the direct operational impacts of climate change itself, such as extreme heat affecting outdoor logistics operations or warehouse cooling loads, flooding affecting facilities, and water scarcity affecting manufacturing processes. Transition risks are the financial and commercial impacts of the shift to a low-carbon economy, such as regulatory compliance costs, changing customer procurement requirements, and the cost of capital adjustments tied to emissions performance.

Which Framework to Use

The law does not explicitly mandate a named framework. However, the UAE's sustainable finance guidance and regional regulatory developments consistently reference TCFD (Task Force on Climate-related Financial Disclosures) and its successor, IFRS S2, as the frameworks most aligned with the law's intent. The TCFD structure organises disclosure across four pillars: governance (how your board oversees climate risk), strategy (how climate risk affects your business plan), risk management (how you identify and manage it), and metrics and targets (how you measure performance against it).

For a small trading or professional services business, a compliant climate risk assessment does not need to be a 60-page report. It needs to demonstrate that you have asked the right questions, documented the risks relevant to your sector and geography, and identified specific governance and management responses.

Common Mistakes and How to Avoid Them

Mistake 1: Assuming the Law Does Not Apply Until Audited

The legal obligation to comply began on 30 May 2025. The absence of enforcement action against a specific company in the months following that date does not create a grace period. Several law firms have flagged that companies are waiting for visible enforcement before acting. This is a dangerous strategy given that the full compliance deadline is 30 May 2026 and that the MRV systems, reduction plans, and climate risk assessments required by that date cannot be assembled in weeks.

Mistake 2: Treating Emissions Data as a One-Department Problem

GHG inventory data lives across multiple business functions. Fleet fuel records typically sit with operations or a transport manager. Utility bills sit with facilities or finance. Generator logs sit with maintenance. Companies that assign emissions reporting to a single person without cross-functional data access consistently produce incomplete inventories that cannot withstand external review.

The fix is structural, not technical. Appoint a single accountable owner with authority to request data from all relevant functions, and build the data-sharing process before you begin the first inventory.

Mistake 3: Omitting District Cooling from Scope 2

District cooling is a material emission source for UAE businesses operating in modern commercial buildings, free zones, and purpose-built industrial estates. Under GHG Protocol methodology, district cooling is classified as a purchased energy service and reported as Scope 2, not Scope 1. Many first-time inventories omit it entirely because it is not managed by an obvious operations function. For a business in a building with heavy cooling demands, this omission can represent a significant understatement of total emissions.

Mistake 4: Confusing the HCEE Threshold with the Compliance Threshold

The Huge Carbon Emission Entity designation (0.5 million tonnes CO2e per year) governs which entities have accelerated obligations under the National Register for Carbon Credits. It is not the threshold for whether the general obligations in the law apply. Companies that calculate their emissions at well below the HCEE level and conclude they therefore have no obligations under the law have misread the statute. All emitting entities have obligations. The HCEE threshold defines additional ones.

What's Next: Turning Compliance Into a Competitive Advantage

The companies that will benefit most from this law are not the ones that achieve minimum compliance and stop. They are the ones that treat the compliance process as the foundation for a more commercially resilient business.

Green Finance Access

The UAE's major banks are actively building sustainability-linked lending products. These instruments tie borrowing costs to pre-defined sustainability performance targets, meaning companies that hit their reduction targets pay less, and companies that miss them pay more. The prerequisite for accessing these products is exactly what the climate law now requires: a verified emissions baseline, a documented reduction plan, and ongoing MRV. Companies that have built this infrastructure are positioned to benefit from a growing pool of lower-cost capital. Those that have not are increasingly priced as higher-risk borrowers.

Supply Chain Qualification

The 49% of UAE businesses planning to drop non-ESG-compliant suppliers by 2028 are not all large multinationals. The supply chain pressure is spreading through mid-market companies as well, because the same Scope 3 reporting obligations that drive large corporates to request supplier data are now being cascaded further down the value chain. An SME that can produce a verified GHG inventory within 48 hours of being asked will consistently win business over a competitor that cannot respond at all.

Carbon Credit Revenue

Cabinet Resolution No. (67) of 2024 established the National Register for Carbon Credits, through which entities can register emissions-reduction projects and generate credits. Non-HCEE entities can participate on a voluntary basis. For SMEs that outperform their internal reduction targets, this creates a potential revenue stream from verified carbon credits within the UAE's developing carbon market. The infrastructure required to access this market is the same infrastructure the law already requires you to build.

What This Changes for SMEs in UAE Free Zones and Mainland Operations

If you are a Finance Director at a UAE Free Zone SME, this means:

• Your emissions data is now a compliance asset, not a marketing exercise. The same verified inventory that satisfies the MOCCAE requirement is what your bank will request during your next loan review, and what procurement teams will ask for before onboarding you as a supplier.

• Your audit exposure is real and specific. If your reported emissions do not reconcile with your energy spend and fuel receipts, a third-party verifier will flag it. Build the data infrastructure now rather than discovering inconsistencies under time pressure.

• Free Zone registration provides no shelter. Whether you operate in JAFZA, DMCC, ADGM, or any other zone, the legal obligation is identical to mainland companies.

If you are an Operations Manager at a UAE manufacturing or logistics SME, this means:

• Fleet fuel and facility electricity consumption are now reportable assets. The same records you use to manage operational costs are the inputs for your Scope 1 and 2 inventory.

• District cooling must be included. If your premises use district cooling and you have not included it in your emissions calculation, your inventory is incomplete.

• Operational decisions now carry a compliance dimension. Vehicle fleet upgrades, energy efficiency retrofits, and supplier selection all intersect with your reduction plan obligations.

In the next 12 to 24 months, expect:

• MOCCAE to issue sector-specific MRV guidance and entity-level reduction targets as implementing regulations continue to be developed. Companies with clean data infrastructure will adapt quickly; those starting from scratch will face a compressed timeline.

• UAE banks to intensify ESG data requests during loan renewals and new credit applications, particularly as the Central Bank's AED 1 trillion sustainable finance commitment accelerates.

• Supply chain ESG clauses to become standard in UAE procurement contracts as more businesses implement their own compliance programmes and begin cascading requirements to suppliers.

• Carbon trading infrastructure under SCA regulation to become operational, creating a functioning market for verified UAE carbon credits.

What you should do now:

• Assign a single data owner in finance or operations and begin collecting 12 months of historical utility bills, fuel logs, and cooling consumption data. This is your baseline.

• Do not wait for sector-specific targets before starting your reduction plan. Document your top emission sources and set internal targets. A credible plan submitted before the deadline is materially better than a perfect plan submitted after it.

Conclusion

Federal Decree-Law No. (11) of 2024 is not one of several sustainability frameworks competing for your attention. It is the operating legal environment for every UAE business from 30 May 2025 onward. The four obligations it creates, measuring your emissions, building an MRV system, submitting a reduction plan, and conducting a climate risk assessment, are not optional enhancements to your business. They are compliance requirements with financial consequences for failure.

The good news is that the underlying data requirement is more manageable than it appears at first. Most UAE SMEs already generate the raw material for a compliant emissions inventory in their utility bills, fuel receipts, and cooling records. The challenge is not the data's existence but its organisation. Companies that centralise that data now, build the reporting process once, and maintain it as an operational routine will find compliance straightforward by the May 2026 deadline.

The companies that will struggle are those that treat this as a future problem. The baseline inventory requires at minimum 12 months of historical data. If you have not started collecting that data, you are already working against the clock.

Assess Your Reporting Readiness