Middle East Regulatory Policy Brief

OFAC Adani $275M Iran Sanctions Settlement, Amin Exchange Designation & UAE Drupal CVE-2026-8495 Cybersecurity Alert — Middle East RegWatch May 24, 2026

Carver Agents — Mon, 25 May 2026 11:33:37 +0530

This week's Middle East RegWatch

Covers five developments across sanctions enforcement, cybersecurity, and global health regulation
A week dominated by OFAC action against Iranian petroleum networks.

OFAC reached a $275 million settlement with Adani Enterprises Limited resolving 32 apparent violations involving liquefied petroleum gas shipments linked to Iran processed through US financial institutions. As part of the settlement Adani will implement remedial measures and cooperate fully with the ongoing OFAC investigation.
OFAC separately designated Amin Exchange and 19 associated vessels under Executive Order 13902 for Iranian petroleum and petrochemical shipments — requiring US persons to block and report all property interests immediately. Transactions involving designated parties are prohibited unless authorised or exempt.
The SDN List was further expanded under Executive Order 13224 adding individuals, entities, and vessels supporting Hamas — requiring immediate screening updates, blocking of dealings, and compliance system updates across all affected organisations.
In the UAE, a critical cybersecurity vulnerability was identified in the Drupal Date iCal module — CVE-2026-8495 — allowing anonymous unauthorised access to sensitive data through improper access control and input sanitisation failures. Organisations must update to Drupal version 4.0.15 or later immediately. The UAE Cyber Security Council recommends circulating the advisory to all subsidiaries and partners.
The 79th World Health Assembly update covers entry into force of 2024 International Health Regulations amendments and ongoing negotiations on the Pathogen Access and Benefit Sharing Annex relevant to UAE and regional member state obligations.
Essential listening for CCOs, sanctions compliance officers, heads of AML, CISOs, and legal counsel operating across the Middle East with exposure to Iran-linked counterparties or US financial institutions.

Carver RegWatch delivers weekly regulatory intelligence across jurisdictions. Published May 24, 2026

For more information, visit the Carver Agents website.

Also from Carver RegWatch this week:

This Week in AI Regulations — EU AI Act high-risk classification guidelines, CNIL €487M record fines, China AI deepfake enforcement
ASEAN RegWatch — Bank Indonesia 50bps rate hike to 5.25%, MAS revokes Bsquared payment licence, Singapore insider trading convictions
USA Regulatory Updates — SEC novel ETF regulatory review, California Hermes Bitcoin kiosk enforcement, IOSCO AI supervisory toolkit
EU Regulatory Updates — EU AI Act consultation deadline June 23, CNIL cybersecurity enforcement priorities 2026, EU Solidarity Fund climate allocation
India Regulatory Updates — RBI restricts Nagar Sahakari Bank, RBI cancels Yashwant Co-operative Bank licence, SEBI Investor Onboarding Regulatory Sandbox
Global Regulatory Briefing — Bank of England CCP resolution paper, Malta tokenisation consultation, ASIC sustainability reporting focus 2026-27

Find all series at The Carver Agent Podcast

Articles mentioned:

[Middle East] Regulatory Insights on Sanctions, Vaccines & Mergers

Carver Agents — Sun, 17 May 2026 22:21:52 +0530

This episode delves into critical regulatory developments affecting multiple sectors including the Generalised Scheme of Preferences, EU Advisory Mission, sanctions evasion, aircraft leasing, and meningococcal vaccine programs.

Key updates include the UAE’s introduction of shadow billing data submissions for outpatient classification, enhancing healthcare data transparency and compliance ahead of full implementation in 2027. The childhood immunization program is also evolving with the addition of the Meningococcal ACYW135 Conjugate Vaccine, alongside updated pneumococcal vaccine dosing schedules.

On sanctions, the U.S. Treasury’s OFAC has designated multiple entities tied to Iran’s Islamic Revolutionary Guard Corps oil operations, imposing stringent blocking and reporting requirements on U.S. persons. Complementing this, FinCEN’s alert underscores risks in illicit financial activities, mandating enhanced due diligence by financial institutions, particularly concerning blockchain and digital asset transactions.

Lastly, the European Commission approved two significant mergers impacting shipping asset management and tissue product manufacturing sectors, ensuring compliance with EU internal market regulations.

For more information, visit the Carver Agents website.

Articles mentioned:

[Middle East] Regulatory Insights on Cybersecurity, Clinical Costing & Trade

Carver Agents — Mon, 11 May 2026 06:27:59 +0530

This episode covers pivotal regulatory developments impacting Public Consultation, Foreign Affairs, Banking, Mercosur-European Union Agreement, and Foreign Trade sectors in the Middle East.

Key updates include Saudi Arabia’s National Cybersecurity Authority launching a public consultation on cybersecurity controls for national events, aiming to enhance governance and resilience against cyber risks. In the UAE, the Department of Health in Abu Dhabi has extended the submission deadline for the Clinical Costing Roadmap’s second year, reinforcing healthcare regulatory compliance. Additionally, a landmark joint initiative by the UAE’s Ministry of Economy and Tourism, Capital Market Authority, and Dubai Financial Services Authority introduces coordinated Quality Management audit inspections to elevate audit firm standards across the region.

For more information, visit the Carver Agents website.

Articles mentioned:

الهيئة الوطنية للأمن السيبراني تستطلع آراء العموم حول وثيقة «ضوابط الأمن السيبراني للأحداث والمناسبات الوطنية»

[Middle East] Key Regulatory Advances in Cybersecurity & Governance

Carver Agents — Mon, 04 May 2026 12:35:03 +0530

This episode highlights significant regulatory updates across key sectors including Governance, Awareness Campaigns, Cybersecurity, Threat Monitoring, and Consultation in the Middle East.

In Saudi Arabia, the National Cybersecurity Authority is actively implementing the Cybersecurity Enhancement Program focused on protecting critical infrastructure during the Hajj Season 1447 Hijri. This program features continuous threat monitoring, dedicated incident response teams, cyber exercises, and awareness campaigns targeting both national entities and Hajj guests, supported by the national portal "حصين."

In the United Arab Emirates, the financial market regulator has launched a public satisfaction survey to evaluate the effectiveness of its awareness campaigns and improve future outreach strategies. Additionally, a consultation survey is open to gather stakeholder input on the regulatory framework for virtual asset activities, aiming to enhance transparency and investor protection.

Furthermore, the Abu Dhabi Global Market Financial Services Regulatory Authority (ADGM FSRA) has introduced enhancements to the insurance regulatory framework, strengthening governance, aligning with IFRS 17 accounting standards, and improving compliance monitoring.

For more information, visit the Carver Agents website.

Articles mentioned:

Survey on the Virtual Assets Regulatory Framework

استبيان الإطار التنظيمي للأصول الافتراضية

20260427 ADGM FSRA Implements Enhancements to the Regulatory Framework for Insurance AR.pdf

[Middle East] Key Regulatory Advances in Corporate and Financial Sectors

Carver Agents — Mon, 27 Apr 2026 09:45:08 +0530

This episode covers significant regulatory developments impacting Articles of Association amendments, Public Joint Stock Companies, and financial communication standards in the Middle East, with relevant implications for Ukraine.

The UAE Securities and Commodities Authority has introduced streamlined approvals for amendments to Articles of Association of Public Joint Stock Companies, enhancing shareholder involvement and regulatory oversight. Additionally, the launch of a securitization approval service formalizes securitization transactions, promoting transparency and risk mitigation.

The Financial Services Regulatory Authority (FSRA) reiterated critical requirements on business continuity, governance, and compliance reporting, urging firms to engage early with regulators to maintain operational resilience. Enforcement actions against financial entities highlight the importance of adherence to anti-money laundering and corporate governance standards.

For more information, visit the Carver Agents website.

Articles mentioned:

DLT and Stablecoins: Where Do We Stand?

المخالفات والمخالفين

هيئة سوق المال تقود التواصل المالي المسؤول

Foreign Affairs Council: Press remarks by High Representative Kaja Kallas

[Middle East] Key Regulatory Advances in Finance, Health & Real Estate

Carver Agents — Tue, 21 Apr 2026 02:30:47 +0530

This episode covers significant regulatory developments across multiple sectors in the Middle East, including financial infrastructure, healthcare compliance, and property management. Listeners will gain insights into new frameworks shaping virtual asset activities, currency symbol mandates, and occupational health enhancements.

We explore the UAE Securities and Commodities Authority’s introduction of a comprehensive Virtual Assets Framework that expands regulated activities from three to eight, covering areas such as custody services and multilateral trading facilities. This framework imposes robust licensing, governance, and prudential requirements for financial entities.

Additionally, the UAE Central Bank’s new mandatory UAE Dirham currency symbol initiative, developed with Vermeg, aims to strengthen capital market infrastructure by standardizing currency representation in official documents.

On the occupational health front, the Saudi Ministry of Municipal and Rural Affairs and Housing invites public feedback on updated construction safety guidelines and a draft executive regulation on vacant properties with annual fees and occupancy disclosure mandates.

For more information, visit the Carver Agents website.

Articles mentioned:

جدول عقوبات حوادث التسمم الغذائي

The CMA Issues the Virtual Assets Framework, Establishing an Integrated Regulatory Regime Comprising Five Core Modules and Eight Regulated Activities

[Middle East] Key Regulatory Updates in Sustainability & Healthcare

Carver Agents — Mon, 13 Apr 2026 08:22:39 +0530

This episode covers critical regulatory developments in Supplementary Deferrals, Healthcare, Guideline implementation, Sustainability Reporting, and Medical Devices across the Middle East.

The European Securities and Markets Authority (ESMA) released key conclusions from its February 2026 Board of Supervisors meeting, adopting updated European Sustainability Reporting Standards and introducing supplementary deferrals for sovereign bond trades effective May 4, 2026. These updates are highly relevant for market participants in the UAE.

In healthcare, the Dubai Health Authority has issued updated External Circulars revising standards for organ and tissue donation from deceased donors after both circulatory and brain death. Furthermore, a new Physical Activity Guideline mandates standardized practices to enhance public health within healthcare facilities.

Saudi Arabia’s National Center for Medical Device Reporting published weekly safety alerts highlighting 16 critical medical device issues, requiring prompt action by healthcare providers to mitigate risks.

For more information, visit the Carver Agents website.

Articles mentioned:

(WU2615) NCMDR Weekly Update

تعميم خارجي: الدليل الإرشادي للنشاط البدني

El Pacto por el Mediterráneo se cumple a medida que la UE presenta la primera iniciativa digital para la región

[Middle East] Key Regulatory Updates on Health, Finance, and Licensing

Carver Agents — Tue, 07 Apr 2026 00:26:26 +0530

This episode covers vital regulatory updates impacting Disaster Risk Management, Repo Facility implementations, Saudi Central Bank licensing, and Monetary Policy adjustments in the Middle East. It highlights measures ensuring healthcare supply continuity, financial sector resilience, and payment service authorization.

In Abu Dhabi, the Department of Health has mandated licensed healthcare entities to maintain a six-month minimum inventory of pharmaceutical products, medical devices, and consumables, alongside monthly reporting to prevent supply disruptions. Meanwhile, Qatar's Central Bank introduced unlimited Qatari Riyal repo facilities with up to three-month maturities, reduced reserve requirements, and loan payment deferrals to bolster financial stability amid external uncertainties. In Saudi Arabia, SAMA licensed Atioon for Innovative Information and Communication Technology Company as a new payment service provider, raising the total to 31 licensed entities and emphasizing the importance of verifying licensing status.

For more information, visit the Carver Agents website.

Articles mentioned:

[Middle East] Strengthening Financial and Healthcare Regulatory Frameworks

Carver Agents — Tue, 31 Mar 2026 01:13:33 +0530

This episode covers critical regulatory developments impacting the Middle East's banking and healthcare sectors, alongside international legal frameworks. Key topics include financial institution resilience, enhanced pharmaceutical warehouse inspections, and updated standards for deceased organ donation.

The Central Bank of the United Arab Emirates has approved a comprehensive resilience package backed by assets totaling one trillion dirhams. This initiative introduces enhanced capital adequacy and liquidity requirements designed to ensure the financial system’s robustness against potential shocks.

In healthcare, Emirates Drug Establishment’s extensive regulatory inspections of pharmaceutical warehouses integrate digital monitoring to improve medicine safety and availability. Additionally, the Dubai Health Authority has formalized updated standards for organ and tissue donation after circulatory death, reinforcing ethical and procedural clarity for healthcare providers.

For more information, visit the Carver Agents website.

Articles mentioned:

[Middle East] Key Regulatory Updates in Healthcare and Finance

Carver Agents — Mon, 23 Mar 2026 21:22:00 +0530

This episode covers significant regulatory updates impacting the Healthcare and Financial sectors in the Middle East, including new mandates on medical procedures, device safety, and service standards.

Key highlights include the UAE Department of Health's introduction of mandatory consultations and strengthened governance for cesarean sections, requiring documented informed consent, standardized classification of procedures, and senior clinical oversight for non-emergency cases. Another vital update mandates healthcare facilities offering urology and andrology services to provide dedicated sample collection rooms that ensure privacy, hygiene, and infection control compliance.

The episode also discusses a safety alert on counterfeit weight loss products containing potentially harmful ingredients, urging vigilance and reporting. Additionally, a medical devices field safety alert outlines recalls and corrective actions manufacturers must communicate to users.

On the financial front, Bahrain's Central Bank approved audited financial statements and reinforced supervisory measures to maintain financial stability amid regional developments.

For more information, visit the Carver Agents website.

Articles mentioned:

[Middle East] Key Regulatory Updates on Currency, Licensing & Resolution 2817

Carver Agents — Mon, 16 Mar 2026 22:12:31 +0530

In this episode, we cover pivotal regulatory updates affecting the Middle East financial sector, including innovations in supervisory examination techniques, the introduction of the UAE Dirham currency symbol, newly licensed finance companies in Saudi Arabia, and the geopolitical impact of UN Security Council Resolution 2817.

The UAE Central Bank has mandated the use of a new UAE Dirham currency symbol with strict visual identity guidelines for all official and financial documents, marking a significant step for national currency branding and compliance.

Saudi Arabia’s Central Bank (SAMA) has licensed three new finance companies: Edge Finance Company and Aij Company for Financing, both focusing on financing SMEs and consumer finance, and Wakad Solutions for Digital Brokerage and Aggregation Services, expanding digital financial service offerings under authorized institutions.

On the geopolitical front, the United Nations Security Council passed Resolution 2817 condemning Iran's attacks on multiple Middle Eastern countries, demanding an immediate halt to hostilities and emphasizing respect for sovereignty and maritime security.

For more information, visit the Carver Agents website.

Articles mentioned:

[Middle East] Regulatory Insights on AML, Scams & Trade Agreements

Carver Agents — Mon, 09 Mar 2026 18:25:40 +0530

This episode delves into vital regulatory developments affecting geopolitical risk, scam and fraud prevention, tariff elimination, and governance across the Middle East financial and trade sectors.

The Dubai Financial Services Authority (DFSA) has updated its AML and Glossary Modules, aligning with UAE federal laws, and issued critical warnings about impersonation scams targeting regulated firms. These enhancements emphasize risk-based AML compliance and senior management oversight.

In Saudi Arabia, the Capital Market Authority granted Core Capital Company the license to conduct advisory activities, reinforcing regulatory compliance and investor protection. Meanwhile, the Comprehensive Economic Partnership Agreement between Japan and the UAE promises tariff eliminations on key industrial exports and sets new standards for digital trade and customs procedures.

For more information, visit the Carver Agents website.

Articles mentioned:

الترخيص لشركة كور كابيتال في ممارسة نشاط تقديم المشورة واستيفائها لمتطلبات بدء ممارسة العمل

[Middle East] Regulatory Advances in Direct Listing & Cybersecurity

Carver Agents — Mon, 02 Mar 2026 18:06:00 +0530

This episode delves into significant regulatory developments impacting the Middle East financial markets, including innovations in direct listing processes, enhanced data protection measures, and new sanctions targeting financial fraud.

Key highlights include the Saudi CMA’s approval for the public offering of the Dinar US Equity Fund, signaling compliance with Capital Market Law while advising investors to carefully consider associated risks. Additionally, the CMA’s proposed mechanism allowing subsidiaries of Main Market-listed companies to list shares directly with shareholder approval marks a transformative step in capital markets.

Further, the National Cybersecurity Authority’s public consultation on licensing cybersecurity services underscores heightened data protection priorities, while the UAE Central Bank’s guidelines on AI use and Dirham currency symbol adoption reflect growing regulatory sophistication. International sanctions by OFAC targeting cyber-enabled threats and shadow fleets emphasize ongoing efforts to combat financial fraud and illicit activities.

For more information, visit the Carver Agents website.

Articles mentioned:

26-فبراير-2026 - إعلان بشأن الموافقة على طرح وحدات صندوق دينار للأسهم الأمريكية

هيئة السوق المالية تستطلع الآراء حول آلية إدراج الشركات التابعة للشركات المدرجة في السوق الرئيسية بناءً على موافقة المساهمين

The CMA Calls for Public Consultation on the Mechanism for Listing Subsidiaries of Main Market Listed Companies Subject to Shareholders’ Approval

موافقة الهيئة على طلب شركة نسيج للتقنية زيادة رأس مالها عن طريق منح أسهم مجانية

المصرف المركزي يُصدر مذكرة إرشادات توجيهية لحماية المستهلك وضمان الاستخدام المسؤول للذكاء الاصطناعي في القطاع المالي

[Middle East] Key Regulatory Updates on GCC Finance and Security

Carver Agents — Mon, 23 Feb 2026 14:44:31 +0530

This episode covers regulatory updates in Vulnerability, GCC, Capital Market Authority, Ramadan, Cash Center Management.

The Kingdom of Bahrain recently hosted the 86th GCC Central Bank Governors meeting, focusing on fintech innovation, cybersecurity, and anti-money laundering collaboration.

Saudi Arabia's Central Bank (SAMA) opened a public consultation on draft rules regulating cash center management to enhance operational controls.

Capital Market Authority approvals for significant capital increases at Al Rajhi Bank and United International Holding Company were announced, supporting financial growth.

The UAE-Vietnam Comprehensive Economic Partnership Agreement took effect, advancing trade relations.

For more information, visit the Carver Agents website.

Articles mentioned:

Multiple Critical Vulnerabilities in Juniper Secure Analytics

البنك المركزي السعودي يطرح "قواعد تنظيم مزاولة نشاط إدارة وتشغيل مراكز النقد" لطلب مرئيات العموم

[Middle East] Key Updates on Finance and Cybersecurity Risks

Carver Agents — Tue, 17 Feb 2026 21:57:17 +0530

Welcome to Carver's Middle East Regulatory Updates.

This episode highlights robust investor demand for Bahrain’s Sukuk Al-Salam and Government Development Bond issues, reflecting strong confidence in Bahrain’s financial instruments. Meanwhile, Saudi Arabia's Central Bank has increased the countercyclical capital buffer to bolster banking sector resilience.

On the cybersecurity front, we discuss critical vulnerabilities discovered in prominent platforms such as SandboxJS, IBM's Common Cryptographic Architecture, BeyondTrust, React Native Community CLI, Dell ThinOS, GitLab AI Gateway, Lexmark printers, and FortiClientEMS, many requiring urgent patching due to active exploits.

These developments emphasize the dynamic regulatory environment and the critical need for vigilance in financial and security sectors.

For more information, visit the Carver Agents website.

Articles mentioned:

[Middle East] Key Regulatory & Cybersecurity Updates from Leading Authorities

Carver Agents — Mon, 09 Feb 2026 04:25:54 +0530

Welcome to this edition of Carver's Middle East Regulatory Updates.

We begin with financial and regulatory developments including the Saudi Central Bank's directive for exchange offices to operate at full capacity during Ramadan and Hajj seasons, ensuring operational efficiency and security at key pilgrimage locations.

In capital markets news, the Capital Market Authority has approved a capital increase for Asas Makeen Real Estate Development and Investment Company, tripling its shares via bonus issuance.

The Central Bank of Bahrain announced that its recent treasury bill issue was oversubscribed by 108%, demonstrating robust investor demand.

On the cybersecurity front, the National Cybersecurity Authority of Saudi Arabia is participating as a cybersecurity partner at the 2026 Global Defense Exhibition, showcasing strategic initiatives to strengthen national cybersecurity resilience. Saudi Arabia also contributed to drafting internal regulations for the United Nations Cybercrime Convention, emphasizing international collaboration against cybercrime.

Major technology companies have released important security updates: ASUS removed a vulnerable feature in its Business Manager software, HP released a service pack patching critical vulnerabilities in ThinPro 8.1, and Samsung issued security patches for flagship mobile devices.

For more information, visit the Carver Agents website.

Articles mentioned:

[Middle East] Regulatory & Security Updates from CMA and CBB

Carver Agents — Thu, 05 Feb 2026 00:41:09 +0530

Welcome to Carver's Middle East Regulatory Updates.

In this episode, we discuss significant institutional moves such as the Capital Market Authority's approval of a capital increase for Asas Makeen Real Estate Development, raising capital from 100 million to 300 million Saudi Riyals by issuing bonus shares.

The Central Bank of Bahrain reported a highly oversubscribed treasury bills issuance worth 70 million Bahraini Dinars, reflecting strong investor demand with a 4.85% weighted average interest rate.

The Capital Market Authority also extended fee exemptions for debt instrument issuance requests for issuers with publicly rated debt, encouraging transparency and market activity until the end of 2027.

On the technology front, we cover critical security updates:

ASUS removed a vulnerable File Shredder feature in Business Manager 3.0.37.0 addressing privilege escalation risks.
HP released ThinPro 8.1 SP9 patching multiple critical vulnerabilities.
Samsung issued security patches for flagship mobile devices covering high-severity risks from Google and Samsung.
SmarterTools SmarterMail versions prior to Build 9511 have critical remote code execution and authentication bypass vulnerabilities.

These updates are vital for compliance and cybersecurity awareness across the region.

For more information, visit the Carver Agents website.

Articles mentioned:

02-فبراير-2026 - موافقة الهيئة على طلب شركة أساس مكين للتطوير والاستثمار العقاري زيادة رأس مالها

على هامش فعاليات مؤتمر الحطام الفضائي هيئة الاتصالات والفضاء والتقنية تنظم لقاء لتعزيز أنشطة قطاع الفضاء

The Capital Market Authority approves the capital increase request for Asas Makeen Real Estate Development and Investment Company through the issuance of bonus shares

CBB Treasury Bills Oversubscribed (2 February 2026)

الهيئة الوطنية للأمن السيبراني تشارك في الأولمبياد الوطني للإبداع العلمي «إبداع 2026»

432318344 - Critical Vulnerabilities in SmarterTools SmarterMail - Alert 91.pdf

المملكة تشارك في إعداد مشروع نص النظام الداخلي لاتفاقية مكافحة الجريمة السيبرانية

هيئة السوق المالية تمدد الإعفاء من المقابل المالي على طلبات طرح أدوات الدين وتحمّلها تكاليف التسجيل والإدراج لإصدارات محدّدة حتى عام 2027م

Discover More