The Zakat, Tax and Customs Authority (ZATCA) built discretion into its enforcement. Its published framework attaches ranges rather than fixed amounts — SAR 5,000 to SAR 50,000 for failing to issue or archive an e-invoice, for example — and ZATCA has said that penalties are applied "according to the type of violation and the number of times it is repeated," so that first-time violations are treated more modestly than repeat ones. For failing to report a malfunction, a warning comes before any fine.
Cabinet Decision No. 106 of 2025 contains none of that. No ranges, no warning stage, no repeat-offense scale — one amount per violation, due as printed. Businesses arriving from a Saudi group structure often assume the same cushion exists here. It does not.
Every Saudi wave brought in smaller companies than the last. The UAE has already published its second phase for businesses below AED 50 million, and the direction is the same. If you are under the threshold today, your date is 1 July 2027 — not "later, probably."
Sources