Managing International Tax Risk in 2026

Ten Critical Controls for Multinationals

(UAE–UK–KSA–US Focus)

Abstract

This article represents a structured analysis of ten recurring risk nodes in cross-jurisdictional tax management, with an emphasis on the United Arab Emirates (UAE), the United Kingdom (UK), the Kingdom of Saudi Arabia (KSA), and the United States (US). We frame each risk, summarise relevant black-letter law and administrative guidance, and conclude with governance actions that in-house tax, finance, and legal teams can implement immediately. The analysis reflects the current statutory and administrative landscape as of March 2026.

Executive summary

Across the UAE, UK, KSA and US, tax authorities increasingly expect transfer pricing (TP) and permanent establishment (PE) positions to match operational reality. The UAE has embedded TP into its 2023 corporate tax regime and issued a detailed TP Guide, documentation thresholds, and CbCR obligations. The UK continues to apply TIOPA 2010 Part 4, is reforming its TP/PE/DPT rules and documentation, and maintains a data-driven audit posture. KSA has expanded its TP framework (including to Zakat payers from 2024) and clarified service-PE concepts under treaties. The US combines a robust §482 regulatory framework with active litigation (e.g., Amazon, Altera, Medtronic), shaping positions on intangibles, CSAs, and stockbased compensation. Governance, narrative consistency, and contemporaneous evidence are decisive in audits and controversy.

1) Understand the Global Footprint: where value, people, and decision rights actually sit

A defensible tax posture begins with a factual map of functions, assets, and risks (FAR) across entities and locations. In the UAE, the Corporate Tax Law (FDL 47/2022) defines residence, PE concepts and scope, while the Federal Tax Authority (FTA) TP Guide emphasises substance over form and accurate delineation of transactions. In the UK, TIOPA 2010 Part 4 codifies the arm’s length principle and expressly ties interpretation to Article 9 of the OECD Model and the OECD TP Guidelines. KSA’s TP Bylaws and Guidelines require a thorough comparability analysis and clear identification of controlled transactions. In the US, Treas. Reg. §1.482-1 imposes the best method rule and a holistic delineation of intercompany conditions. Practically, a footprint review should integrate legal entity charts, decision-rights matrices, boards’ minutes, delegated authorities, and data on where key personnel actually execute DEMPE (development, enhancement, maintenance, protection and exploitation) of intangibles.

2) Permanent Establishment (PE) risk in a post-MLI, remote-first world

Remote and hybrid work, traveling executives, and commissionaire/marketing support models can create fixed-place or dependent-agent PEs. The UK applies CTA 2010 s.1141 et seq. with HMRC guidance clarifying that short-term presence alone is not determinative but habitual conclusion of contracts matters; HMRC updated commentary through and after COVID on remote work patterns. KSA’s Income Tax Law Article 4 defines PE (including construction and service-type scenarios), and ZATCA’s 2023 Circular provides treaty-based clarifications on service PEs. The OECD Model Article 5 and Commentary remain the global interpretive anchor, with 2025 commentary updates addressing cross-border home-working. For UAE nonresidents, the Corporate Tax Law’s PE and state-sourced income provisions interact with treaties to determine exposure. Businesses should maintain travel logs, contracting protocols, and escalation triggers when negotiations, signing authority or on-the-ground activity intensify in-market.

3) Transfer pricing must match the business you actually run

Authorities test alignment between written policies, intercompany contracts, and operational conduct. The UAE’s TP Guide (CTGTP1) stresses economic substance and delineation, with Ministerial Decision 97/2023 setting Master/Local file thresholds (AED 3.15bn MNEs; AED 200m revenue) and scoping inclusions/exclusions for the Local File. The UK’s TIOPA framework and HMRC manuals require arm’s length outcomes with self-assessment adjustments. KSA’s TP Guidelines and Bylaws prescribe approved methods and documentation, now extended to Zakat payers from 2024. In the US, §482 regulations (best method, comparability, aggregation) require the pricing to reflect value provided, with extensive service and intangible rules. A single operating model should be recognisable to business leaders and reconcilable to ERP actuals, budgets and KPIs.

4) Substance and economic reality: from ESR and Free Zone rules to DEMPE

Substance has become a hard gate, not a soft factor. The UAE’s Economic Substance Regulations (Cabinet Res. 57/2020 and MD 100/2020) require adequate people, expenditure and assets for relevant activities; Free Zone 0% regimes hinge on qualifying income, qualifying activities, de-minimis limits and audited financials. KSA scrutinises whether principal, IP or finance entities genuinely control risk; its TP framework and APA launch indicate a maturing certainty regime. The UK’s substance tests are embedded through TP/PE/DPT interactions. In the US, DEMPE analysis drives intangible allocations, with courts scrutinising what parties actually do and control. Ensure boards meet in the right place, that decision logs and risk approvals live where profits are booked, and that outsourced functions are supervised and documented.

5) Tension between global standards and local law: when to flex the template

Global policy consistency is valuable, but local law governs. UAE’s MD 97/2023 tailors TP documentation thresholds; Free Zone rules restrict IP exploitation at 0% and impose deminimis tests. UK domestic exemptions and forthcoming reforms (including documentation and ICTS proposals) illustrate that UK-to-UK transactions and SME treatments are evolving. KSA extends TP compliance to Zakat payers and clarifies documentation materiality, while the US has unique constructs (commensurate-with-income for intangibles, Altera stock-based comp in CSAs). Templates for intercompany agreements and mark-ups should be configurable by jurisdiction, with governance that allows controlled deviations approved centrally.

6) Transparency and disclosure: CbCR, TP disclosure forms, and narrative consistency

Narratives must reconcile across filings. UAE Cabinet Resolution 44/2020 sets CbCR obligations for UAE-headquartered MNEs (AED 3.15bn threshold). The UAE TP Guide and Corporate Tax return will require related-party disclosures and alignment with MD 97/2023 local-file scoping. KSA requires annual disclosure forms, Local/Master Files and CbCR, with the scope extended to Zakat payers from 2024. The UK requires documentation under TIOPA and HMRC guidance, with enhanced documentation reforms under consultation, while the US mandates extensive disclosures (Forms 5471/5472/8865, CbCR for US UPEs under §1.6038-4) and Schedule UTP for uncertain positions. Maintain a single source of truth feeding entity accounts, TP files, CbCR tables and statutory returns to avoid mismatches that trigger joint audits.

7) Managing tax authority relationships: audit readiness and engagement protocols

Audits are increasingly data-driven and multi-year. In the UK, HMRC’s International and Large Business directorates coordinate TP/PE/DPT enquiries with rigorous information notices and governance. ZATCA pursues structured TP audits and has introduced an APA programme to prevent disputes. The FTA’s TP Guide outlines risk assessment, and the US IRS continues to invest in Transfer Pricing Practice (TPP) resources and trial teams. Companies should pre-build audit files, maintain request trackers, agree communication lines, and escalate across legal/finance when a matter approaches litigation thresholds or MAP/APA territory.

8) M&A and business change: spike periods for latent and new risk

Carve-outs, integrations, restructurings and market entries/exit create volatility in PE, TP, and indirect taxes. In the UAE, qualification for Free Zone 0% and ESR can be lost inadvertently through changes in activity mix or domestic permanent establishments. In KSA, changes can reposition service PEs and shift Zakat/Income tax boundaries. UK reorganisations can engage DPT exposure and TP adjustments; in the US, post-deal IP platforms, buy-ins and platform contribution transactions require early method selection and valuation governance. Tax must secure a seat at the strategy table with sign-offs embedded in investment committee papers.

9) Governance, controls, and documentation: building defensibility by design

Effective outcomes reflect strong governance: defined roles, approvals, and documentation standards. UAE: master/local file governance (MD 97/2023), Free Zone compliance (Cabinet 55/2023; MD 139/2023), ESR and audited financials. UK: documentation aligning with HMRC’s expectations and potential ICTS reporting; US: robust §6662(e) penalty protection through contemporaneous documentation; KSA: disclosure form accuracy and timely submissions. Establish policy owner KPIs, quarterly TP true-ups tied to ERP data, and an internal TP/PE control framework integrated with SOX/ICFR where applicable.

10) Prepare for controversy before it happens: lessons from case law

US litigation remains a bellwether on intangibles and CSAs. Amazon (Tax Court affirmed by Ninth Circuit) narrowed the pre-2009 definition of compensable ‘intangibles’ and rejected aggregation of residual business assets; Altera validated Treasury’s stock-based compensation cost-sharing rule; Medtronic continues to scrutinise method selection and factual underpinnings, with the Eighth Circuit vacating and remanding again in 2025 for further CPM analysis. These outcomes stress the need for method discipline, comparable selection rigour, and contemporaneous evidence. Comparable themes appear in UK enquiry practice and KSA’s growing jurisprudence through administrative guidance. Build your file as if it will be read in court: facts first, then method.

A concise control checklist

• Footprint & DEMPE map refreshed annually; document decision rights and board governance.
• PE watchlist and triggers (remote work, contracting, on-the-ground services); legal + HR + tax sign-offs.
• TP policy-to-operations reconciliation (pricing, contracts, invoices, ERP postings) every quarter.
• UAE-specific: MD 97/2023 thresholds; Free Zone QFZP tests (Cabinet 55/2023; MD 139/2023); ESR compliance.
• UK-specific: TIOPA Part 4 compliance; monitor TP/PE/DPT reforms; align with HMRC manual expectations.
• KSA-specific: TP Bylaws & Guidelines; Zakat payer scope; service-PE circular; consider APA where appropriate.
• US-specific: §482 documentation for penalty protection; CSA governance; method memos; audit simulation.
• Transparency: CbCR governance (UAE Cabinet 44/2020; US §1.6038-4), consistent narratives across returns.
• Audit playbook: roles, escalation, privilege strategy, and settlement criteria documented in advance.
• M&A: tax workstream gating with PE/TP/ESR/Free Zone impacts assessed pre-sign and at Day 1/100.

Conclusion

International tax risk management is no longer a back-office exercise. In each of the UAE, UK, KSA and US, the statutory hooks exist to challenge structures that lack substance or misprice value. Equally, clear frameworks exist to achieve certainty. Teams that invest in governance, data integrity, and narrative consistency are best positioned to avoid disputes—and to win them when they arise.

References

1. United Arab Emirates — Federal Decree-Law No. 47 of 2022 on the Taxation of Corporations and Businesses (official English; UAE Legislation).

2. UAE — Ministerial Decision No. 97 of 2023 (Transfer Pricing Documentation thresholds and scope).

3. UAE — Federal Tax Authority, Transfer Pricing Guide CTGTP1 (Oct. 23, 2023).

4. UAE — Cabinet Resolution No. 44 of 2020 on organising Country-by-Country (CbC) reporting.

5. UAE — Economic Substance Regulations: Cabinet Resolution No. 57 of 2020 and Ministerial Decision No. 100 of 2020.

6. UAE — Free Zones: Cabinet Decision No. 55 of 2023 (Qualifying Income) and Ministerial Decision No. 139 of 2023 (Qualifying/Excluded Activities).

7. UAE — Ministerial Decision No. 73 of 2023 (Small Business Relief under Article 21, thresholds and conditions).

8. United Kingdom — TIOPA 2010, Part 4 (Transfer pricing) (legislation.gov.uk); HMRC International Manual INTM412010 (arm’s length, OECD alignment); PE guidance incl. INTM261010.

9. United Kingdom — Diverted Profits Tax: Finance Act 2015, Part 3; HMRC manual INTM489500; UTPP transition guidance at INTM489310.

10. Kingdom of Saudi Arabia — Transfer Pricing Bylaws (GAZT Board Resolution 6-1-19, 2019) and ZATCA Transfer Pricing Guidelines (Third Edition, 2021/2024 updates).

11. KSA — Income Tax Law (Royal Decree M/1 of 2004), Article 4 (Permanent Establishment); ZATCA Circular on taxation of Permanent Establishments under DTAs (May 17, 2023).

12. United States — 26 U.S.C. §482 and Treasury Regulations §1.482-1 through -9 (eCFR/LII/IRS).

13. United States — Amazon.com, Inc. & Subs. v. Commissioner, 148 T.C. 108 (2017), aff’d 934 F.3d 976 (9th Cir. 2019).

14. United States — Altera Corp. v. Commissioner, 926 F.3d 1061 (9th Cir. 2019), rehearing en banc denied, cert. denied (2020).

15. United States — Medtronic, Inc. v. Commissioner, 900 F.3d 610 (8th Cir. 2018); on remand T.C. Memo 2022-84; vacated and remanded again, Nos. 23-3063/3281 (8th Cir. Sept. 3, 2025).

16. OECD — Transfer Pricing Guidelines for Multinational Enterprises and Tax Administrations (2022).

17. OECD — Model Tax Convention on Income and on Capital, Article 5 (Permanent Establishment) and Commentary (2017; 2025 Commentary updates on cross-border working).