What happened
Dubai’s financial-oversight body — the Financial Audit Authority (FAA) — has publicly reaffirmed that an employee who reports a financial or administrative violation at an entity under FAA audit is entitled to workplace protection. The reporting channel is Nazaha, a confidential platform run by the Authority. The statement was made by Majed Al Ansari, Executive Director of the Operation, Compliance and Performance Audit Sector at FAA. In his words, employment protection for whistleblowers is a fundamental pillar of the programme.
What Nazaha is
Nazaha is FAA’s platform for receiving reports of violations in the entities it audits. What separates Nazaha from an ordinary internal complaint to an employer is confidentiality: FAA guarantees the protection of the reporter’s identity and of information about their employment once the report is accepted for review. The channel is designed so that the reporter is not exposed to the employer or third parties — otherwise the whistleblower mechanism loses its point.
What protection the employee actually gets
FAA describes the scope of protection in four blocks:
- Confidentiality of the identity and employment information of the reporter, once the report has been accepted;
- Protection from workplace action and discrimination — the employer may not retaliate against the employee for the mere fact of reporting;
- A duty on the audited entity to refrain from any action against the reporting employee;
- Withdrawal of administrative or disciplinary decisions already taken against the employee, where those decisions were in fact a response to the report and are found to be unjustified.
Protection is available to employees of audited entities who meet the programme’s formal requirements — in particular, who report through the official Nazaha channel and provide information that fits FAA’s definition of a financial or administrative violation.
Who sits under FAA audit — and why this matters for Dubai business
FAA’s remit covers four categories of Dubai entity:
- Dubai government departments and public agencies;
- companies owned by the Government of Dubai;
- companies in which the Government of Dubai holds 25% or more of the share capital;
- entities in Dubai’s special development zones and free economic zones that fall under FAA audit.
For a private business the practical implication is this. If your company deals with any of the above — as a contractor, supplier, joint-venture partner, or operator inside a Dubai free zone — an employee of your counterparty or joint project may lawfully report to Nazaha and receive protection. The employer entity is then obliged to stop any action against the employee, and FAA is obliged to investigate the report.
What this means for compliance practice
FAA’s public reminder about Nazaha signals a hardening line on transparency and anti-fraud procedures in Dubai. Practical takeaways for a company that deals with the Dubai public sector or is set up in one of its free zones:
- Company policy must explicitly prohibit retaliation against an employee for a good-faith report of a violation. This is a standard whistleblower policy — a written no-retaliation rule, an independent reporting channel, a defined response deadline, and disciplinary consequences for anyone who tries to punish a reporter.
- Your internal channel does not replace the external one. If an employee reports through Nazaha — not just internally — the employer must refrain from any action against them, regardless of the employer’s own view of the merits of the report.
- Distinguish financial from administrative violations. A financial violation typically covers budgeting, spending, reporting, procurement, contractual obligations, and conflicts of interest. An administrative violation covers abuse of authority, breach of internal regulations, and misuse of official position. Both are covered by Nazaha.
- Align HR procedures. Disciplinary decisions taken immediately after an employee has reported to an oversight body are automatically suspect. The right sequence is: independent internal fact-finding first, then — on the basis of findings — disciplinary measures, documented independently of the report itself.
- Train line managers. The practical source of retaliation is usually not top management but the reporter’s direct manager. That is where a conflict of interest most often arises, so the policy must reach line managers at every level.
The wider regulatory frame for UAE business in 2026 is covered in our overview of UAE business regulation in 2026. Practical HR and international-team hiring under compliance requirements — in hiring a multilingual team in the UAE.
