Table of Contents
Frequently Asked Questions
What does activity code 8291.02 actually permit in Dubai
Activity code 8291.02 authorises businesses to compile credit histories, employment records, and business credit profiles and supply that data to entities assessing creditworthiness. Core customers include banks, finance companies, retailers, insurers, and other regulated entities making credit or risk decisions.
It is important to understand that this activity does not permit a business to operate as a full credit bureau. Operators aggregate and supply data as a service — they do not replace or replicate the Al Etihad Credit Bureau (AECB), the UAE's officially designated credit bureau. The commercial role is that of a data service provider offering faster, more granular intelligence.
Which regulatory body oversees credit reporting services in the UAE
At the federal level, credit information activity falls under the oversight of the Central Bank of the UAE (CBUAE), which sets the parameters for how credit data may be collected, processed, and distributed.
Additional oversight comes from the Dubai Department of Economy and Tourism (DED) for mainland licence issuance and Invest in Dubai for activity verification and licence guidance. All three bodies play a role depending on your chosen jurisdiction and the scope of services offered.
What federal laws govern credit reporting and data protection for this business
Federal Law No. 6 of 2010 on Credit Information is the primary legislation governing credit data activity in the UAE. It established the AECB and defines the obligations of any private entity operating in the credit data space, requiring operators to supply derived data services and analytics rather than function as a parallel bureau.
UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection applies directly to any business compiling individual histories. Compliance with consent requirements, purpose limitation, and data subject rights is not optional — it is a legal condition of operating lawfully.
Where can a credit reporting services business be licensed in Dubai
There are two primary setup jurisdictions available for activity code 8291.02 in Dubai:
- Dubai Mainland (DED) — provides the broadest market access, including direct contracts with UAE banks and government-linked entities.
- Meydan Free Zone — offers 100% foreign ownership, lower overheads, and faster incorporation, making it well suited to regional data service operations.
The right choice depends on your target customers, ownership structure, and operational priorities. Confirming that activity code 8291.02 is approved under your chosen jurisdiction before proceeding is an essential early step.
How long does it take to set up a credit reporting services company in Dubai
The estimated setup time for a credit reporting services business under activity code 8291.02 is 4 to 8 weeks, depending on the jurisdiction chosen and the completeness of documentation submitted.
Free zone routes such as Meydan Free Zone typically offer faster incorporation timelines, while mainland applications via the DED may take longer due to additional regulatory touchpoints, particularly for financial data activities where a detailed business plan is required.
What documents are needed to incorporate a credit reporting business in Dubai
Core incorporation documents for activity code 8291.02 include a Memorandum of Association, shareholder passport copies, proof of address, and a business plan. The business plan carries particular weight for financial data activities and should clearly articulate the scope of services, data sources, and compliance framework.
Financial services licence conditions may also require documentation supporting fit-and-proper assessments of directors and shareholders, as well as evidence of minimum paid-up capital, depending on the scope of services offered.
Is there a minimum share capital requirement for this activity
Minimum share capital for activity code 8291.02 is subject to CBUAE requirements and will depend on the specific scope of services the business intends to offer. There is no single fixed figure applicable to all operators.
Businesses should confirm capital requirements directly with the Central Bank of the UAE and their chosen licensing authority — either the DED for mainland or the relevant free zone authority — as part of the pre-application process.
How does a private credit reporting business differ from the Al Etihad Credit Bureau
The Al Etihad Credit Bureau (AECB) is the UAE's officially designated credit bureau, established under Federal Law No. 6 of 2010. It operates as the central repository for credit information in the country. Private operators licensed under activity code 8291.02 are not permitted to replicate or replace this function.
Instead, private credit reporting businesses are positioned as data service providers — aggregating, enriching, and supplying derived credit data and analytics to financial institutions, retailers, and other end-users who require faster or more granular intelligence than a single bureau source can provide. The distinction is both legal and commercial.
Start a Credit Reporting Services Business in Dubai
Lenders in the UAE are handing out more credit than ever, and every one of those decisions needs data behind it. SME lending is up, buy-now-pay-later has spread fast, and fintech keeps adding new borrowers. All of it runs on knowing who pays back and who does not.
Activity code 8291.02 is the license for supplying that knowledge. This guide covers what the code lets you do, who watches over it, how to set up, and where the money comes from. It is a regulated space, but it is open to anyone who prepares properly.
Key Stats at a Glance
What This License Covers
Activity code 8291.02 lets you compile credit histories, employment records and business credit profiles, and supply that data to anyone judging creditworthiness. Your buyers are banks, finance companies, retailers, insurers and any regulated firm making a credit or risk call.
There is one line you must not cross. This is not a license to run a full credit bureau. The Al Etihad Credit Bureau is the UAE's officially designated bureau, set up under Federal Law No. 6 of 2010, and private operators cannot replace or copy it.
You sit alongside it as a data service provider, aggregating and enriching information for clients who need faster or more granular intelligence than a single bureau source gives them. That distinction is both legal and commercial, and getting it wrong at application stage is the quickest way to stall.
Who Your Clients Will Be
The buyer list is wider than banking alone:
- Licensed banks and finance companies
- Insurance firms
- Telecom operators
- Retailers running credit terms
- Recruitment and HR firms checking employment histories
Money reaches you in three shapes. Subscription access suits recurring clients such as banks and insurers. Per-query fees suit occasional users such as retailers or HR firms. Bulk data contracts suit the larger lending institutions. What wins the account is accuracy, the ability to plug into a client's systems through an API, and how fast you turn a query around. Price alone rarely decides it.
Mainland or Free Zone
Mainland gives you the widest reach, including direct contracts with UAE banks and government-linked bodies. A free zone gives you full ownership, lower overheads and a faster start, which suits a regional data service operation. This is the biggest choice you will make when setting up. Let your clients decide it, not the price.
[blockCTACostCalculator]
Step by Step Setup Guide
- Step 1, pick your jurisdiction: Mainland through DET, or Meydan Free Zone. Decide this before anything else, because it shapes every step after it.
- Step 2, book your trade name: Confirm at the same time that activity code 8291.02 is approved where you are applying.
- Step 3, prepare your documents: Memorandum of Association, shareholder passport copies, proof of address and a business plan. The plan carries real weight here, so set out your services, your data sources and your compliance framework clearly.
- Step 4, apply for initial approval: From DET or the free zone authority. Financial data activities may need a no-objection letter from the Central Bank of the UAE before the license is issued.
- Step 5, sort premises, license and staff: Mainland needs a physical address, while a free zone accepts a flexi-desk. Pay the fees, take the license, and register with MOHRE once staff come on board.
- Step 6, open a corporate bank account: Allow 4 to 8 weeks. Banks run enhanced due diligence on a financial data business, so expect questions about your model, your sources and your client base.
Compliance and What You Need in Place
Central Bank oversight
The Central Bank of the UAE governs credit information activity and sets the parameters for how credit data may be collected, processed and distributed. Federal Law No. 6 of 2010 on Credit Information is the law behind it. That law created the Al Etihad Credit Bureau and sets out the duties of every private firm working in this space.
Data protection
Federal Decree-Law No. 45 of 2021 on Personal Data Protection applies directly to any business compiling individual histories. Collection, storage and transfer must meet the consent, purpose limitation and data subject rights provisions. This is not optional. It is a condition of trading lawfully.
Capital and directors
Financial services license conditions may ask for minimum paid-up capital and fit-and-proper assessments of directors and shareholders, depending on the scope of services you offer. There is no single figure that applies to everyone, so confirm the number with the Central Bank and your licensing authority before you apply.
Staff
Register with MOHRE for employment compliance once you start hiring. Contracts and Emiratisation duties apply from your first employee.
Market Opportunity
The UAE credit market is deepening. Rising SME lending volumes, fast buy-now-pay-later adoption and continued fintech growth all push demand for third-party credit data that adds to what the official bureau provides.
There is a wider pattern behind that. The World Bank has consistently documented a strong link between the depth of a country's credit information systems and growth in private sector lending, which is exactly the direction the UAE is travelling. Better data does not simply describe a lending market. It helps it expand.
For a founder, the opening is in the gap between what one bureau can supply and what a modern lender wants: quicker answers, richer profiles and a clean API. Fill that gap well and the contracts renew themselves.
Conclusion
Credit reporting services under 8291.02 sit in a regulated but open space, between the official bureau infrastructure and the lenders who need faster, sharper creditworthiness data.
The license itself is achievable on the mainland or through a free zone. The harder work is positioning yourself correctly against the bureau, meeting UAE data protection law properly, and building the banking relationships that make a financial data business credible. Get those three right and the rest follows.
[blockCTAContact]
References
- Central Bank of the UAE
- Invest in Dubai
- Dubai Department of Economy and Tourism
- Ministry of Human Resources and Emiratisation (MOHRE)
- World Bank
