An international relief organisation based in Europe is preparing to transfer funds to a programme partner operating in a region that falls under the UAE sanctions regime. The compliance team identifies that the recipient appears on a designation list maintained under the applicable UAE country regime. The transfer is blocked. Can the organisation proceed under a humanitarian authorisation? What must it demonstrate, and how quickly can it act?
As of June 2026, the UAE operates an autonomous sanctions regime administered by the Executive Office for Control and Non-Proliferation, which sits within the UAE federal government. Humanitarian and NGO authorisations under that regime require a documented application to the competent authority, demonstrating the relief character of the activity, the absence of prohibited benefit to a designated party, and the existence of adequate controls to ensure funds or goods reach their intended recipients. The process is separate from – and not automatically aligned with – OFAC, OFSI, or EU licensing tracks, and a business operating across those regimes must manage each application independently.
This guide sets out the governing authority, the application procedure, the cross-regime comparison, the risk flags practitioners see most often, and the point at which specialist counsel adds the most value.
What authority governs humanitarian authorisations under the UAE sanctions regime?
The UAE's autonomous sanctions regime is administered by the Executive Office for Control and Non-Proliferation (EOCN), which coordinates designation decisions, maintains the UAE Terrorist Designations List and the broader consolidated screening list, and grants authorisations for otherwise prohibited transactions. The regime draws on the UAE Federal Decree-Law on Combating Money Laundering and the Financing of Terrorism and Illegal Organisations, as well as Cabinet decisions that give effect to United Nations Security Council measures. For humanitarian operators, this dual foundation matters: both the UAE's autonomous list and the UN Consolidated List are operative, and an authorisation under one does not substitute for compliance with the other.
In our cross-border practice, we regularly advise NGOs that assume the UN Consolidated List is the ceiling of their exposure in the Gulf region. That assumption is wrong. The UAE maintains its own designations that go beyond the Security Council list, and the EOCN is the sole authority empowered to grant a humanitarian carve-out under the national regime. There is no general licence mechanism of the kind familiar under OFAC or OFSI that automatically permits a class of humanitarian activity. Each case requires a specific, documented authorisation.
The legal basis for humanitarian authorisations is grounded in the same instrument that establishes the prohibition. The EOCN may grant a permit where the activity is demonstrably humanitarian in character, the operator is a recognised relief organisation, and adequate safeguards exist to prevent diversion to a designated party. These three elements are the analytical core of any UAE humanitarian authorisation application.
How does the application procedure work in practice?
A humanitarian authorisation application to the EOCN proceeds through a structured sequence of steps. No automatic pathway exists; every application is evaluated on its own facts. The procedure involves assembling an evidence package, submitting it through the designated channel, managing the authority's queries, and then operating within the terms of any permit granted.
- Eligibility check and scoping. Before preparing the application, determine whether the proposed activity is genuinely humanitarian in character – that is, whether it is directed at relieving human suffering without conferring a prohibited benefit on a designated party. This scoping step also maps all counterparties in the transaction chain against the UAE consolidated list, the UN Consolidated List, and, where relevant, OFAC's SDN List (OFAC's list of Specially Designated Nationals and blocked persons) and EU and UK lists. Gaps at this stage become the authority's questions later.
- Documentation assembly. The application package typically includes: the applicant's registration documents as a recognised humanitarian or development organisation; a description of the programme, the beneficiary population, and the geographical scope; the identity and ownership structure of all local implementing partners; a funds-flow diagram showing the full transfer chain from donor to end recipient; and the internal controls the applicant will use to prevent diversion. The level of detail the EOCN expects reflects the seriousness with which it treats diversion risk.
- Submission and acknowledgement. Applications are submitted to the EOCN through its official channels. Confirm the current submission mechanism before filing, as administrative arrangements have evolved. An acknowledgement of receipt should be secured and retained as a record.
- Assessment and queries. The EOCN reviews the application and may request supplementary information. Responding promptly and accurately to queries is important: delayed or incomplete responses can extend the review period significantly. In our experience, the authority focuses its queries on the ownership and governance of local implementing partners – precisely the area where many NGOs hold incomplete information.
- Decision and conditions. An authorisation, if granted, will carry conditions: typically a defined time period, a defined scope of activity, a specified counterparty, and a reporting or audit obligation. Operating outside those conditions is itself a breach. If the application is refused, the EOCN will communicate the basis for refusal, and the organisation must consider whether it has grounds to resubmit with additional evidence or whether the activity cannot proceed.
- Ongoing compliance and record-keeping. Once the authorisation is in place, the operator must maintain records of all transactions conducted under it, monitor for any change in the designation status of counterparties, and report material changes to the EOCN. Records should be retained for a period consistent with the applicable UAE legal requirements and, where the operator is also subject to OFSI or OFAC requirements, for the longer period those regimes require.
The position above covers the standard case. Your facts – the counterparty, the goods, the route, the regime in play – change the analysis. If the implementing partner's ownership structure is complex, or if the programme involves dual-use goods, the application demands specialist input before submission.
For a review of your eligibility and a discussion of the application process, contact Calder & Vance at info@caldervance.com.
How does the UAE approach compare with OFAC, OFSI, and the EU?
The most significant practical difference between the UAE and the three Western regimes is the absence of a standing general licence for humanitarian activity. Under OFAC, for example, a general licence exists that permits certain categories of transactions for the benefit of the Iranian people or for support of non-governmental organisations' activities in certain contexts – without requiring a separate application in each case. OFSI operates a comparable licensing regime with defined humanitarian carve-outs. The EU has similarly embedded humanitarian exceptions in specific Council regulations.
The UAE has not, as of the date of this guide, adopted a general-licence mechanism in the same form. This means that an NGO which relies on a standing OFAC or OFSI general licence to support its operations must separately engage the EOCN for any activity that touches a UAE-listed party or a UAE-administered measure. The administrative burden is materially higher.
A second divergence concerns the ownership and control (the UK and EU test for whether a non-listed entity is caught through a listed person) analysis. Under OFSI and the EU, a non-listed entity can fall within the prohibition if it is owned or controlled by a designated party – even where ownership is below the threshold that would trigger OFAC's 50 percent rule (OFAC's rule treating entities owned 50 percent or more by blocked persons as themselves blocked). The UAE approach to non-listed entities that are connected to designated parties is grounded in its own federal instruments. Practitioners should not assume that the OFAC mechanical ownership test or the OFSI/EU control analysis maps directly onto the UAE position. We regularly advise clients who have applied one regime's test to a counterparty they are engaging in the UAE context – and who have thereby misjudged their exposure.
A third divergence is enforcement posture. OFAC and OFSI have well-documented public enforcement records. The UAE's enforcement activity in relation to humanitarian operators is less publicly visible, but that does not mean the risk is lower. Reputational consequences, loss of operating permits, and referral to prosecuting authorities are all live possibilities for a non-compliant operator.
For NGOs operating simultaneously under OFAC, OFSI, EU, and UAE measures, the practical lesson is clear: obtain each authorisation separately, on its own terms, and do not allow one grant to substitute for another.
What are the specific risk flags for humanitarian and NGO operators?
Several risk patterns recur in humanitarian authorisation work under the UAE regime. Identifying them early – at the programme design stage rather than after a blocking event – materially reduces both delay and enforcement exposure.
- Incomplete ownership mapping of implementing partners. Local NGOs in high-risk regions often have governance structures that are opaque to the primary applicant. A silent majority shareholder, a board member with a commercial interest in a sanctioned entity, or a funder whose own designations have not been checked can each defeat an otherwise sound application. The EOCN expects the applicant to have mapped these relationships, not merely to have relied on a self-certification by the partner.
- Dual-use goods and technology. Medical equipment, communications technology, and certain construction materials can carry dual-use characteristics under the EAR (the US Export Administration Regulations administered by BIS) and equivalent UAE and EU instruments. Where the programme involves the physical transfer of goods, the humanitarian character of the transfer does not remove the export-control analysis. Both a UAE humanitarian authorisation and, where required, a BIS or ECJU licence may be needed. These two tracks run in parallel and neither substitutes for the other.
- Funds-flow complexity. Where the transfer chain involves a correspondent bank, a money-services business, or a payment intermediary that is itself subject to UAE screening obligations, a humanitarian authorisation at the programme level does not automatically protect the intermediary. Each entity in the chain must satisfy itself that its own obligations are met.
- Programme scope drift. An authorisation granted for a defined activity and a defined counterparty does not extend to a modified programme or an additional implementing partner. Expanding scope without notifying the EOCN is a common source of inadvertent breach.
- Secondary-sanctions risk. Where a UAE-based bank or payment firm facilitates a humanitarian transfer, OFAC's secondary-sanctions reach – particularly in the context of certain country regimes – can create exposure for the financial institution even if the primary operator holds a UAE authorisation. Compliance counsel advising humanitarian operators must address this layer explicitly.
If a transaction has already been flagged, or if an application has been refused, an early review can preserve options that narrow with time. Contact Calder & Vance at info@caldervance.com for a confidential assessment.
Correcting a persistent myth: does a UN clearance cover UAE requirements?
A widespread assumption among humanitarian operators – particularly those familiar with the UN Ombudsperson process for ISIL and Al-Qaida-related designations – is that UN-level clearance resolves their exposure in member-state regimes, including the UAE. This is incorrect, and in the UAE context the error can be consequential.
The UAE gives domestic effect to UN Security Council measures through Cabinet decisions. Those decisions create obligations under UAE federal law that are distinct from the Security Council resolution itself. An entity that has obtained a humanitarian exception at the UN level, or that has been removed from the UN Consolidated List, is not automatically treated as authorised or de-listed under the UAE autonomous regime. The EOCN maintains its own list and its own authorisation process, and UN clearance is a relevant factor in an application but not a substitute for it.
Similarly, operators holding an OFAC or OFSI licence for the same activity are not thereby authorised to conduct that activity insofar as it engages UAE sanctions. Each regime requires its own compliance track. We have acted for organisations that, having secured OFAC and OFSI coverage, proceeded on the assumption that their UAE exposure was thereby resolved – only to discover, when a payment was blocked, that the EOCN had not been engaged at all.
When should counsel be instructed?
The question is not whether to involve specialist counsel, but when. The earlier in the programme-design phase that counsel is engaged, the lower the cost – both in fees and in delay risk.
Instruct counsel when:
- any counterparty, implementing partner, or ultimate beneficiary population is connected, directly or indirectly, to a party on a UAE, UN, OFAC, OFSI, or EU list;
- the programme involves dual-use goods, communications technology, or financial transfers through intermediaries subject to UAE AML and sanctions screening obligations;
- the organisation is subject to parallel OFAC, OFSI, or EU obligations and needs to manage all four tracks concurrently;
- a previous application has been refused or a payment has been blocked;
- the organisation's own governance or funding structure raises questions about its own designation risk;
- the programme is time-critical and a delay of weeks in the authorisation process would defeat the humanitarian purpose.
In our experience, the most avoidable delays occur when an organisation submits a first application with an incomplete ownership analysis or without a funds-flow diagram. The EOCN's queries then add weeks or months to the timeline. Front-loading the evidence work – with the support of counsel who knows what the authority expects – is almost always the more efficient approach.
Viktor Lindqvist and the wider Calder & Vance licensing team advise humanitarian and development organisations on UAE, OFAC, OFSI, EU, and UN authorisation tracks. We assess eligibility, prepare and submit the authorisation application, and manage the authority's queries through to decision. For a discussion of your programme and its authorisation requirements, contact us at info@caldervance.com.
Related practices
Related practices
- Frozen Account Management – BIS and EAR – managing frozen or blocked accounts under US export-control and sanctions rules
- Humanitarian authorisation under UAE: advanced considerations – deeper analysis of complex programme structures and multi-party transfers
- Humanitarian authorisation under UN measures – procedure and practice before the Security Council committees and the Ombudsperson