The Complete Guide to UAE Climate Law Compliance for SMEs and Free Zone Businesses

You found out your Free Zone is not exempt. Maybe a lawyer mentioned it in passing, or a client asked whether you have started measuring emissions. Either way, the assumption most UAE SME leaders made when Federal Decree-Law No. (11) of 2024 was announced — that it applies to large industrial conglomerates and certainly not to a trading company in DMCC or a logistics operation in JAFZA — turns out to be incorrect.

The law came into full effect on 30 May 2025. It applies to every public and private entity in the UAE whose operations generate greenhouse gas emissions. That means mainland companies, Free Zone companies, and businesses of every size. The full compliance deadline for all entities is 30 May 2026.

For Finance Directors and Operations Managers at UAE SMEs, this creates four concrete obligations to operationalise before that deadline: measuring your Scope 1 and 2 emissions, implementing a monitoring and reporting system, submitting an emissions reduction plan, and documenting your climate risk assessment.

Estimated reading time: 14 minutes.

What is Federal Decree-Law No. (11) of 2024?

Federal Decree-Law No. (11) of 2024 on the Reduction of Climate Change Effects is the UAE's first comprehensive legislation making corporate climate accountability a legal obligation rather than a voluntary commitment. It was adopted in August 2024, published in Official Gazette No. 782, and entered into force on 30 May 2025.

The law operationalises the UAE's Net Zero 2050 national strategy by requiring businesses to measure, report, and reduce their greenhouse gas emissions. It does not allow entities to self-certify or rely on rough estimates. Data must be collected systematically, maintained for at least five years, and submitted through a government-recognised monitoring, reporting and verification (MRV) system.

This is not a disclosure framework where non-compliance carries reputational risk. It is a legally enforceable regulation with financial penalties, potential licence suspension, and exclusion from government procurement.

Key dates:

• 30 May 2025: Law enters into force. All entities must begin measurement activities.
• 28 June 2025: Registration deadline for Huge Carbon Emission Entities (HCEEs) in the National Register for Carbon Credits.
• 30 May 2026: Full compliance required. MRV systems must be operational, baseline inventory submitted, reduction plan active.

Why does this matter for your business?

There are three distinct risks created by this law. Understanding all three separates a Finance Director who builds the right compliance infrastructure from one who reacts too late.

Regulatory and financial risk. Under Articles 15 and 16, non-compliance carries fines from AED 50,000 to AED 2,000,000 per violation. Repeated violations within two years double, reaching a maximum of AED 4,000,000. The law also permits competent authorities to impose licence suspension, operational activity restrictions, and exclusion from government procurement as administrative measures.

Supply chain and procurement risk. Even if your own emissions profile is modest, your customers will force your hand. Large multinationals operating in the UAE are subject to international regulations requiring them to report Scope 3 emissions, which includes the emissions generated by their suppliers. According to a Bain and Company survey, 49 percent of UAE businesses plan to drop suppliers who cannot demonstrate ESG compliance by 2028.

Access to finance. UAE banks are integrating climate risk into credit assessments. The UAE Central Bank has committed AED 1 trillion in sustainable finance by 2030. Businesses with verified emissions data and clear reduction plans access sustainability-linked loan products at more favourable rates. Those without are increasingly categorised as higher-risk borrowers.

Who must comply? The no-exemption rule

The most consequential misunderstanding about this law is that it contains carve-outs based on company location, size, or sector. It does not.

Free Zones are not exempt. The law defines its scope through the concept of "sources," meaning all public and private legal persons and individual enterprises whose activities generate greenhouse gas emissions. Legal analysis by multiple UAE law firms confirms that this definition encompasses every Free Zone entity in the country, including those registered in JAFZA, DMCC, ADGM, DIFC, RAKEZ, KIZAD, and all other zones. There is no carve-out article, no Free Zone annex, and no size-based exemption.

Company size is not a threshold. The law distinguishes between entity types, but not in the way many businesses expect. Entities whose combined Scope 1 and Scope 2 emissions reach at least 0.5 million tonnes of CO2-equivalent per year are designated as Huge Carbon Emission Entities (HCEEs) under Cabinet Resolution No. (67) of 2024. These entities face accelerated obligations, including mandatory registration in the National Register for Carbon Credits by 28 June 2025 and annual third-party verified GHG reporting.

The HCEE threshold is the dividing line between two tiers of obligation, not the dividing line between who must comply and who does not. A trading company in DMCC emitting 5,000 tonnes of CO2 per year is not a HCEE, but it is still legally obligated to measure emissions, build an MRV system, submit a reduction plan, and conduct a climate risk assessment.

In plain terms: if your business operates in the UAE and consumes electricity, runs a vehicle fleet, uses diesel generators, or occupies premises with district cooling, you have emissions to measure.

Step 1: Build your GHG emissions inventory

An emissions inventory is a complete account of the greenhouse gases your business produces, categorised by source. For most UAE SMEs, this means accounting for two categories.

Scope 1 — what you burn or release directly. Sources your business owns or controls. The most common Scope 1 sources for a UAE SME are fuel combustion in owned or leased fleet vehicles, diesel burned in on-site generators, and refrigerant leakage from air conditioning and cooling systems. Manufacturing process emissions also fall here.

Scope 2 — what you buy as energy. Indirect emissions from purchased electricity, district cooling, steam, or heat. District cooling is treated as a purchased energy service and therefore falls under Scope 2, not Scope 1. Many UAE businesses in modern commercial buildings rely heavily on district cooling, and it must be included in their emissions calculation.

The law references IPCC guidelines and what advisory firms consistently describe as GHG Protocol-aligned inventory standards. In practice, this means collecting activity data (fuel volumes, electricity consumption in kWh, cooling consumption) and multiplying by appropriate emission factors. For electricity from DEWA, a verified emission factor of 0.4041 kg of CO2 per kWh has been used by UAE corporate operators for Scope 2 calculations, based on DEWA's own climate reporting. Abu Dhabi utilities operate under their own developing factor guidance. No single national grid emission factor has been mandated by MOCCAE as of early 2026, so use your utility provider's most recently published factor.

The starting point for most SMEs is straightforward: pull 12 months of utility bills, fuel receipts, and fleet odometer logs. The complexity lies not in finding the data but in centralising it across departments that have never shared it before.

Step 2: Implement your MRV system

An MRV system is the ongoing process by which you monitor emissions continuously, report them to the relevant authority, and have that data verified by a qualified third party. It transforms a one-time inventory exercise into a repeatable operational process.

MOCCAE has developed the Integrated Emission Quantification Tool (IEQT) as the national MRV transparency platform, initially launched in December 2023 as part of the UAE's National MRV Transparency System. Legal commentary from late 2025 positions the IEQT as the central system through which entity-level data will ultimately feed into the national registry. As of early 2026, no official MOCCAE guidance has been published specifying how individual SMEs register or submit data through the IEQT at a technical level. This is an area to monitor closely as implementing regulations continue to be issued.

The law requires that emissions data be collected against an approved methodology (aligned with IPCC and GHG Protocol standards), that records be maintained for at least five years, and that the data be verifiable by a Ministry-authorised agency. For HCEEs, third-party verification is explicitly mandatory. For non-HCEE entities, the verification requirement is implied by the law's emphasis on data integrity.

For most UAE SMEs, the MRV system does not need to be complex at this stage. The minimum viable approach is a centralised data repository with a single assigned owner, consistent input templates for each emission source, clearly documented emission factors and their sources, and a record of each data entry including who submitted it and when.

Step 3: Prepare your emissions reduction plan

The law requires covered entities to submit a reduction plan aligned with national emission-reduction targets. The UAE's Third Nationally Determined Contribution (NDC 3.0), submitted in November 2024, commits the country to reducing national emissions by 47 percent by 2035 relative to a 2019 baseline.

At a national level, the NDC 3.0 provides sector-level discussion of energy, industry, transport, buildings, waste, and agriculture pathways. The law states that the UAE government will set annual emission-reduction targets for all industry sectors and review them periodically.

As of early 2026, no binding, quantitative reduction targets specific to SME-relevant sectors such as general logistics, trading, light manufacturing, or professional services have been published by MOCCAE. This is a genuine regulatory gap — but it does not mean SMEs should wait. The reduction plan submitted in 2026 will need to demonstrate intent and a credible trajectory, even if sector-specific quotas have not yet been codified.

Practical starting point: use your completed emissions inventory to identify your top three emission sources by volume. For a logistics company, that is likely fleet fuel consumption. For an office-based business, it is likely purchased electricity and cooling. Document what actions you will take to reduce each, with a timeline.

Step 4: Conduct your climate risk assessment

The fourth obligation requires entities to assess how climate change could affect their business operations and document what they are doing about it.

A climate risk assessment examines two categories. Physical risks are the direct operational impacts of climate change itself: extreme heat affecting outdoor logistics or warehouse cooling loads, flooding affecting facilities, water scarcity affecting manufacturing. Transition risks are the financial and commercial impacts of the shift to a low-carbon economy: regulatory compliance costs, changing customer procurement requirements, the cost of capital adjustments tied to emissions performance.

The law does not explicitly mandate a named framework. The UAE's sustainable finance guidance and regional regulatory developments consistently reference TCFD (Task Force on Climate-related Financial Disclosures) and its successor, IFRS S2, as the frameworks most aligned with the law's intent. The TCFD structure organises disclosure across four pillars: governance, strategy, risk management, and metrics and targets.

For a small trading or professional services business, a compliant climate risk assessment does not need to be a 60-page report. It needs to demonstrate that you have asked the right questions, documented the risks relevant to your sector and geography, and identified specific governance and management responses.

Common mistakes and how to avoid them

Mistake 1: Assuming the law does not apply until audited. The legal obligation began on 30 May 2025. The absence of enforcement action does not create a grace period. The full compliance deadline is 30 May 2026, and the MRV systems, reduction plans, and climate risk assessments required cannot be assembled in weeks.

Mistake 2: Treating emissions data as a one-department problem. GHG inventory data lives across multiple business functions. Fleet fuel records typically sit with operations or a transport manager. Utility bills sit with facilities or finance. Generator logs sit with maintenance. Companies that assign emissions reporting to a single person without cross-functional data access produce incomplete inventories. The fix is structural: appoint a single accountable owner with authority to request data from all relevant functions, and build the data-sharing process before you begin the first inventory.

Mistake 3: Omitting district cooling from Scope 2. District cooling is a material emission source for UAE businesses operating in modern commercial buildings, free zones, and purpose-built industrial estates. Under GHG Protocol methodology, it is classified as a purchased energy service and reported as Scope 2, not Scope 1. Many first-time inventories omit it entirely.

Mistake 4: Confusing the HCEE threshold with the compliance threshold. The HCEE designation (0.5 million tonnes CO2e per year) governs which entities have accelerated obligations under the National Register for Carbon Credits. It is not the threshold for whether the general obligations in the law apply. All emitting entities have obligations.

Old way vs. new reality

The old way. A finance manager at a JAFZA-based logistics company receives a compliance notice in April 2026. She starts asking department heads for fuel logs. The fleet manager has six months of receipts in a drawer. The facilities team has utility bills split across three different email inboxes. The generator diesel records are with the maintenance contractor. Six weeks later, she has a partial spreadsheet that the external verifier rejects for missing data and inconsistent units. The company misses the May deadline. Fines begin.

The new reality. The same company spent two days in June 2025 assigning a single data owner in finance and building a centralised log. By December 2025, they had a full year of Scope 1 and 2 data, consolidated in one place. When the verifier arrived, the audit took three days rather than six weeks. The baseline was submitted on time and the company used the verified data in their response to a new client RFP asking about emissions.

Turning compliance into a commercial advantage

The companies that benefit most from this law are not the ones that achieve minimum compliance and stop. They are the ones that treat the compliance process as the foundation for a more commercially resilient business.

Green finance access. UAE banks are building sustainability-linked lending products. The prerequisite for accessing them is exactly what the climate law now requires: a verified emissions baseline, a documented reduction plan, and ongoing MRV.

Supply chain qualification. The 49 percent of UAE businesses planning to drop non-ESG-compliant suppliers by 2028 are not all large multinationals. Mid-market companies are cascading the same requirements. An SME that can produce a verified GHG inventory within 48 hours of being asked will consistently win business over a competitor that cannot respond at all.

Carbon credit revenue. Cabinet Resolution No. (67) of 2024 established the National Register for Carbon Credits, through which entities can register emissions-reduction projects and generate credits. Non-HCEE entities can participate on a voluntary basis. For SMEs that outperform their internal reduction targets, this creates a potential revenue stream from verified carbon credits within the UAE's developing carbon market.

Conclusion

Federal Decree-Law No. (11) of 2024 is not one of several sustainability frameworks competing for your attention. It is the operating legal environment for every UAE business from 30 May 2025 onward. The four obligations — measuring your emissions, building an MRV system, submitting a reduction plan, and conducting a climate risk assessment — are compliance requirements with financial consequences for failure.

The good news is that the underlying data requirement is more manageable than it appears. Most UAE SMEs already generate the raw material for a compliant emissions inventory in their utility bills, fuel receipts, and cooling records. The challenge is not the data's existence but its organisation. Companies that centralise that data now, build the reporting process once, and maintain it as an operational routine will find compliance straightforward by the May 2026 deadline.

Get the data readiness checklist to identify which of the four obligations your business has already addressed, where your gaps are, and what to prioritise first.