The Dubai Financial Services Authority (DFSA) is the independent regulator of financial services in the DIFC, a financial free zone in Dubai, UAE. Its regulatory mandate includes overseeing asset management, banking, securities, and other financial activities, with a strong emphasis on protecting client assets to maintain market integrity and investor confidence. The client assets regime is critical for ensuring that client money and investments are safeguarded, especially in cases of firm insolvency.
CP160, released on August 5, 2024, with a comment deadline of October 20, 2024, is titled “Updates to the Client Assets Regime.” This consultation paper reflects the DFSA’s response to supervisory findings that some aspects of the regime are not well understood or poorly complied with by authorized firms. The updates aim to provide clarity and emphasis, particularly for authorized firms within the scope of the regime and registered auditors preparing Client Asset Auditor’s Reports.
CP160 focuses on updating the client assets regime, which governs how financial firms handle and protect assets belonging to their clients. It covers key aspects such as:
- Clarifying definitions of client assets, including potentially crypto assets.
- Mandating stricter segregation of client and firm assets to prevent co-mingling.
- Requiring regular reconciliations, possibly monthly, to ensure accuracy.
- Enhancing the role of registered auditors with annual review obligations.
- Requiring immediate notification to DFSA for any breaches or losses.
- Ensuring staff handling client assets are adequately trained and competent.
These updates are designed to address observed issues in compliance and provide a robust framework for client asset management.
Clarifying the Scope of Client Assets
One of the primary clarifications brought forth in CP160 related to Fund Property. Previously, while Money deemed to be Fund Property was excluded from Client Money protections, ambiguity remained around other asset types like Investments and Crypto Tokens. The industry largely welcomed the DFSA’s proposal to exclude all categories of Fund Property from the definition of Client Assets, affirming the view that such assets are already protected under the Collective Investment Law and Rules. This clarification relieves investment managers who solely act under delegation from unnecessary regulatory duplication, reducing operational burden while preserving investor safeguards.
Client Asset Crisis Preparedness and Operational Readiness
Another key feature of CP160 was the introduction of a “Client Asset crisis preparedness pack.” This proposal, developed with a forward-looking lens on insolvency and recovery planning, requires firms holding Client Assets to maintain critical records to facilitate asset return in distress scenarios. Industry feedback appreciated the underlying intent but sought more clarity around the scope. The DFSA responded by limiting the requirement to firms that “hold” Client Assets, not those who merely “control” them through mandates. Furthermore, flexibility was granted regarding integration into existing business continuity plans, alleviating fears of redundant compliance work. This alignment demonstrates a regulatory sensitivity to practical implementation without compromising the objective of enhanced resolution preparedness.
Auditor Roles and Reporting Adjustments
The expanded expectations for auditors under CP160 stirred significant debate. Initially, the DFSA proposed that auditors not only identify material discrepancies in reconciliations but also opine on whether appropriate remediation had occurred. The industry pushback was swift, citing misalignment with the ISRS 4400 framework, which confines auditors to factual reporting rather than subjective judgment. In response, the DFSA reverted to a more neutral stance, requiring firms themselves to report on remediation steps while keeping auditor responsibilities within internationally accepted bounds. This adjustment shows an effective calibration between regulatory ambition and professional boundaries.
Third Party Agent Assessments: From Guidance to Rule
A notable structural change was the elevation of Third Party Agent (TPA) suitability assessment criteria from guidance to enforceable rules. While most firms acknowledged the benefits of consistency and accountability, concerns arose over the availability of detailed data—particularly in jurisdictions with limited transparency. The DFSA addressed this by emphasizing the importance of good-faith efforts, documentation, and justifiability rather than absolute compliance. The industry further appreciated the clarification that not all criteria must be met, but where exceptions exist, firms must be prepared to explain their rationale. This principle-based approach balances rigor with flexibility.
Diversification and Disclosure in a Global Context
In line with international best practices, CP160 introduced considerations around diversification of Client Money placements and required disclosures regarding insolvency regimes in the TPA’s jurisdiction. The proposed disclosures evolved meaningfully following industry feedback. Rather than obligating firms to share the outcome of their internal TPA assessments, the DFSA refined the requirement to center on “relevant aspects” of the insolvency regime that may affect the client—such as depositor preference or guarantee schemes. This pivot ensures client-facing information remains useful and comprehensible, avoiding regulatory overload while supporting informed decision-making.
Reconciliations and Reporting Frequency: Striking a Balance
Reconciliation timelines and client reporting intervals were also a point of contention. CP160’s initial proposal to require reconciliation of Client Investments within five days of receiving TPA statements met resistance due to operational constraints, especially for smaller firms. After considering the feedback, the DFSA opted for a monthly reconciliation cycle for both Client Investments and Client Money, thus ensuring regular oversight without imposing disproportionate administrative strain. Similarly, a proposal to mandate monthly reporting to Professional Clients was dropped after firms highlighted that many such clients rely on real-time account access and prefer not to receive formal statements. By maintaining flexibility, the DFSA acknowledged the digital transformation of client engagement.
Looking Ahead: Transition and Implementation
Ultimately, the implementation of the updated Client Assets rules has been deferred to January 2026, giving firms ample time to adapt. The DFSA’s decision to extend the transition period—originally proposed as three months for the crisis preparedness pack—came in response to industry requests for more time to align systems and processes. This consultative responsiveness, seen throughout the CP160 journey, reinforces confidence in the regulator’s commitment to collaborative rulemaking.
Industry Feedback
The feedback report shows that the industry supported this changes, at times, citing operational constraints and requesting greater flexibility:
References
Dubai Financial Services Authority. CP160: Updates to the Client Assets Regime. August 6, 2024. https://dfsaen.thomsonreuters.com/sites/default/files/net_file_store/CP160_Updates_to_the_Client_Assets_Regime.pdf
Dubai Financial Services Authority. Feedback Statement on CP160: Updates to the Client Assets Regime. March 14, 2025. https://dfsaen.thomsonreuters.com/sites/default/files/net_file_store/DFSA1547_14077_VER30.pdf
Leave a Reply