Setting up in the DIFC: what the licence does not cover
The licence is the part of setting up in the DIFC that has a receipt, and it is also the part that is finished. Employment, data, the commercial terms and the structure above the entity are four separate pieces of work, and they bite in that order.
The UK–UAE corridor · Part of Outsourced General Counsel, Dubai

A DIFC licence establishes the entity and permits its activities. It does not cover employment contracts under the DIFC Employment Law, data protection registration, the commercial terms the entity will trade on, or the group structure above it. Dinmore Bell runs those four as one function across both jurisdictions.
The licence is the part of setting up in the DIFC that has a receipt. It is also the part that is finished. Everything that decides whether the entity works commercially happens afterwards, and most of it is invisible on the day the certificate arrives.
This is a corridor problem more than a Dubai problem. A UK business opening in the DIFC usually has an English-law contract stack, an English employment handbook and a UK holding company, and it assumes that the new entity inherits all three. It does not. What follows is what the licence does not cover, in the order it tends to bite.
Does the DIFC licence mean the legal work is done?
No. The licence establishes the entity and permits the activity. Employment terms, data registration, the commercial contracts and the group structure above the entity are separate pieces of work, and none of them is included.
A DIFC licence answers one question: may this entity exist here and carry on these activities. It says nothing about the agreements the entity will sign, the people it will employ, the data it will process or how profits get back to the parent.
Businesses discover the gap in a predictable order. Employment first, because somebody has to be hired. Then data, because the first enterprise customer asks. Then the commercial terms, because the first significant contract is negotiated against them. Then structure, usually at the point somebody is doing a transaction or a tax review and looks properly at the chart.
Which employment law applies inside the DIFC?
DIFC employees are covered by the DIFC Employment Law, not the UAE federal labour law that applies on the mainland. A contract drafted for a mainland entity, or lifted from a UK handbook, does not comply.
This is the single most common error, and it is expensive because it is systematic: it affects every contract issued rather than one of them.
Employment inside the Centre runs on DIFC Law No. 2 of 2019, the DIFC Employment Law, which came into force on 28 August 2019 and replaced the previous DIFC regime of 2005. It is its own system, with its own rules on notice, end-of-service, leave, and what happens to unpaid amounts when employment ends.
Three consequences matter to a UK business arriving with its existing paperwork.
Restrictive covenants do not travel. A post-termination restriction drafted to be enforceable in England, against the background of English case law on reasonableness, is being asked to work in a different forum with a different approach. The clause is often kept word for word because nobody asked.
End-of-service is a real liability, not a formality. It accrues, it is calculated by formula, and it is payable. A business that has budgeted for salary and not for the gratuity has understated its employment cost from the first hire.
The employee handbook is part of the deal. Policies imported wholesale from a UK parent frequently promise things the DIFC entity has no mechanism to deliver, and contradict the contract that was signed on the same day.
What happens to the English-law contracts?
They usually still work, but the governing law and jurisdiction clauses stop matching reality. A contract performed in Dubai, signed by a DIFC entity, with a London court clause, is enforceable in theory and awkward in practice.
There is nothing wrong with English law as the governing law of a commercial agreement with a UAE counterparty. It is chosen deliberately and often. The problem is inheritance rather than choice: the terms move across untouched, and nobody asks whether the dispute mechanism still makes commercial sense.
The questions worth asking before the first significant contract goes out of the new entity are narrow and answerable.
Which entity is actually contracting, and does the counterparty know? A UK parent signing for work delivered by a Dubai subsidiary creates a mismatch between who is liable and who is performing.
Where would you want a dispute heard? The DIFC Courts are a common-law forum operating in English, which is frequently the practical answer for a business with English-law paper. A London jurisdiction clause in a contract with a Dubai counterparty about work done in Dubai is a clause that will be argued about before anything else is.
How does payment work, and in what currency? Withholding, transfer and invoicing mechanics belong in the contract rather than in an email after the first invoice is queried.
What about data protection?
The DIFC has its own data protection regime, separate from UK GDPR and from the UAE federal law. A DIFC entity processing personal data has its own registration and compliance obligations.
A UK business that has done the UK GDPR work tends to assume it is covered. The DIFC operates its own data protection law, published in the DIFC legal database alongside the rest of the Centre's legislation, with its own notification requirements and its own rules on transferring data out of the Centre.
The practical point is that the group's existing privacy notice, records of processing and intra-group transfer arrangements now need a DIFC-shaped version. That is a piece of work with a deadline attached, and it is usually discovered when a customer's procurement questionnaire asks for evidence of registration.
What about the structure above the entity?
The DIFC entity sits under something. Whether that is the UK trading company, a holding company or the founder personally determines how profits move, how the group is financed and what a future sale looks like.
This is the piece most often deferred, because it is the only one with no immediate deadline.
The default is that the DIFC company is owned by whatever entity happened to sign the incorporation forms, which is frequently the UK trading company. That works until somebody wants to take money out, bring in an investor at one level and not the other, or sell one part of the group without the other.
Intra-group agreements are the same story. Where the Dubai entity is servicing UK customers, or the UK team is delivering work billed out of Dubai, there is a transaction between two companies, and it needs paper and a price. In the absence of both, the arrangement is decided later by somebody else: a tax authority, a buyer's due diligence team, or a departing shareholder.
What does this cost to get right at the start?
Materially less than retrofitting it. Employment templates, a data position and a set of commercial terms are a defined piece of work at setup; the same items reopened during a funding round or a sale are done under time pressure and at a discount to the price.
None of this is urgent on the day the licence issues, which is exactly why it gets left. The cost of leaving it is not a fine. It is a diligence list two years later, with a buyer or an investor reading it and pricing every gap.
Where a specialist is needed
UAE corporate tax positions, transfer pricing methodology and VAT registration are matters for a qualified tax adviser in the jurisdiction, and Dinmore Bell instructs and manages one rather than opining on it. Proceedings before the DIFC Courts are conducted by rights-of-audience practitioners, instructed and controlled on the client's behalf. The strategy, the scope and the spend stay in one place.
The order to do it in
Employment first, because the first hire creates the first liability. Data second, because the first enterprise customer will ask. Commercial terms third, before the first significant contract rather than after it. Structure fourth, and before any event that would make it expensive to change.
Running one legal function across two jurisdictions is a standing job rather than a project, which is the argument for a retained outsourced General Counsel in Dubai function rather than a setup package that ends when the licence prints. If it would help to work out which of the four items above is actually pressing, a Scope Analysis takes half an hour and produces a list.
Common questions
- Does a DIFC licence cover employment contracts?
- No. Employment inside the Centre is governed by the DIFC Employment Law, which is separate from UAE federal labour law. Contracts written for a mainland entity, or lifted from a UK handbook, do not comply with it.
- Can we keep English law in our contracts after opening in the DIFC?
- Often yes, and it is a common choice. The question worth asking is which entity is contracting and where a dispute would be heard, because a London jurisdiction clause in a contract performed in Dubai will be argued about before anything else.
- Do we need to do anything about data protection if we already comply with UK GDPR?
- Yes. The DIFC operates its own data protection regime with its own registration and transfer requirements. Existing UK documentation needs a DIFC version, and it is usually a customer questionnaire that surfaces the gap.
- Do UK restrictive covenants work in the DIFC?
- Not automatically. A covenant drafted against English case law on reasonableness is being asked to work in a different forum. Keeping the clause word for word because nobody reviewed it is the commonest version of this problem.
- Who should own the DIFC entity?
- It depends on how profits are meant to move, whether investors will come in at one level and not another, and what a future sale looks like. The default, which is whichever company signed the incorporation forms, is rarely the considered answer.
Sources
- 01DIFC Law No. 2 of 2019, the DIFC Employment Law difc.com
- 02DIFC legal database difc.com
More: The UK–UAE corridor
All insights →Do UK restrictive covenants work in the UAE?
A covenant drafted for an English contract and pasted into a Dubai one rarely fails because the idea is wrong. It fails because every load-bearing part of it was written for a different legal system, and none of those parts travelled.
Employing somebody in the UAE: the three documents
A job offer, a contract registered with MOHRE and an internal contract written in head office. They rarely agree, and only one of them is the document that governs.
Employing people in the UAE while the company stays British
A UK company opening in Dubai has to decide who employs whom before the first hire, not after. Free zone against mainland, the UK contract that does not travel, and the intra-group agreement that makes the whole thing legible.