Saudi Arabia is now a signatory to the Multilateral Competent Authority Agreement on Automatic Exchange of Financial Account Information

Source: E&Y

Executive summary

On 2 November 2016, the Organisation for Economic Co-operation and Development (OECD) announced that the Kingdom of Saudi Arabia (KSA) joined the Common Reporting Standard (CRS) Multilateral Competent Authority Agreement (MCAA), committed to the first exchange of financial account information by September 2018 (2018 adopter).

KSA joins 86 other jurisdictions as signatories of the MCAA and over 100 countries committed to adoption of the CRS either as a 2017 or early adopter or 2018 adopter.

Similar to the US Foreign Account Tax Compliance Act (FATCA), the CRS requires certain financial institutions such as banks, brokers, funds, certain insurance companies and custodial institutions to amend their due diligence and tax reporting procedures.

Detailed discussion

The CRS1

On 21 July 2014, the OECD published the Standard for Automatic Exchange of Information in Tax Matters (the Standard) which involves the systematic and annual transmission of “bulk” taxpayer financial account information by the source jurisdiction to the residence jurisdiction of the taxpayer.

The Standard consists of bilateral and reciprocal, non-reciprocal and multilateral Model Competent Authority Agreements (CAAs), the CRS and accompanying commentaries. The CAAs are intended as a template for intergovernmental agreements and link the CRS and the legal basis for the exchange allowing the financial account information to be exchanged. The CRS contains the type of financial institutions in scope, the financial account information to be exchanged and the due diligence and reporting procedures to be undertaken by financial institutions.

Financial institutions classified as either Depository Institutions, Custodial Institutions, Investment Entities and Specified Insurance Companies are considered Reporting Financial Institutions under the CRS and are required to amend onboarding procedures for account holders, perform additional due diligence procedures on existing accounts, monitor for a change in account holder circumstances and complete annual reporting to local competent authorities.

The legal basis for exchange

Certain legal instruments permit automatic exchange under the Standard. These include:

  • Double Tax Agreements with the standard OECD Model Article 26
  • The Multilateral Convention on Mutual Administrative Assistance in Tax Matters (the Convention), specifically Article 62
  • Tax Information Exchange Agreements

The Model CAAs also provide the administrative basis for the automatic exchanges. These specify the type of information to be exchanged and the timing and format of submission of such information.

Relevance for KSA

It is expected that Reporting KSA Financial Institutions (or KSA branches of other Partner Jurisdiction Financial Institutions) collect and retain the tax residence information of their account holders (both entities and individuals), personal details (including Tax Identification Numbers), and financial details including account balances and any amounts paid or credited to the account held.

As 2018 adopters, Reporting KSA Financial Institutions will also be expected to have new customer onboarding procedures in place from 1 January 2017 unless notified otherwise.

The first information exchange for Reporting KSA Financial Institutions should take place in 2018 for 2017 reportable accounts. The KSA General Authority for Zakat and Tax (GAZT) will need to collect this information and then exchange it before the end of September 2018. Although the reporting date for Reporting KSA Financial Institutions is yet to be determined, other CRS participating jurisdictions generally have reporting deadlines within six months of this date.

The GAZT will be able to receive information on account balances belonging to KSA tax residents that are held by financial institutions in jurisdictions with which KSA has agreed to exchange information, and moreover, account information about domestic and foreign entities that are controlled by KSA tax resident individuals and companies. Similarly, KSA will exchange data with these jurisdictions on the account information with local financial institutions belonging to non-KSA tax residents and KSA entities owned by non-KSA Controlling Persons. In practice therefore, all persons (being a physical person, legal entity or non-corporate structure) all over the world will be impacted by CRS and should be classified accordingly.

The CRS relies heavily on local Anti-Money Laundering (AML) and Know Your Customer (KYC) requirements for financial institutions and self-certification by account holders. Among other things, account holders must inform their financial institutions about their current tax residence status. The respective requirements under the local country law may differ from one jurisdiction to another and it is not uncommon that some individuals may be considered as tax resident in more than one country, or alternatively, as not a tax resident of any country. Therefore, validation procedures by Reporting KSA Financial Institutions may not be straightforward.

Impact of CRS MCAA

Owing to the ratification of the Convention and signing of the CRS MCAA by the KSA, certain information which was not previously accessible to the tax authorities will be automatically exchanged among them.

The CRS brings into scope a wide range of financial institutions, including businesses across the banking, wealth and asset management and insurance sectors. Although the CRS is based in large part on the Model 1 FATCA intergovernmental agreement, there are substantial differences between the two regimes, which could result in significant changes to existing IT systems, processes and procedures.

Individuals and entities holding accounts may need to determine and complete tax documentation to certify their status upon account opening or request of a financial institution.


Financial institutions in KSA should immediately begin to assess the likely impact of the CRS and what actions are required to become compliant.

Although it will be possible to leverage existing FATCA processes and systems, the scope, coverage and reporting volumes under CRS will be much greater:

  • Significant scope for variation as CRS is implemented under local law
  • Risks related to customer experience such as incorrect or duplicate reporting, customer responses and enquiries from foreign tax authorities
  • Systems readiness and reportable data accessibility
  • Resourcing challenges due to short implementation timeframes

The timeline for compliance is very tight with potentially, subject to further announcements, one month to comply.

Individuals and entities should also be prepared to certify their tax residence status to Reporting KSA Financial Institutions under CRS requirements when requested.



2. Please see EY Global Tax Alert, Saudi Arabia to apply Convention on Mutual Administrative Assistance in Tax Matters as of 1 January 2017 , dated 13 October 2016.

EYG no. 04042-161Gbl

Download this Tax Alert as a PDF file