Understanding Dubai’s Virtual Assets Regulatory Authority (VARA) – Part 1

In the swiftly evolving realm of virtual assets, Dubai has positioned itself as a pioneering force, establishing a comprehensive regulatory framework that sets a new global benchmark. At the core of this progressive approach is the Dubai Virtual Assets Regulatory Authority (VARA), formed under Law No. 4 of 2022. VARA’s mandate is to oversee Virtual Asset Service Providers (VASPs) within the emirate, ensuring a delicate balance between fostering innovation and maintaining financial stability and integrity. This article delves deeply into VARA’s regulatory framework, particularly focusing on its Company Rulebook, and examines its implications for the global virtual asset ecosystem.

The Genesis of Dubai’s Virtual Assets Regulatory Authority (VARA)

The establishment of VARA in 2022 marked a significant milestone in the global regulation of virtual assets. As cryptocurrencies, blockchain technology, and other digital assets gained prominence in the financial world, regulators worldwide grappled with effective oversight of this nascent industry. Recognizing both the potential and the risks associated with virtual assets, Dubai took a proactive approach by creating a dedicated regulatory body.

VARA’s creation was not merely a response to the growing importance of virtual assets but also a strategic move to position Dubai as a leading hub for fintech innovation. By providing a clear regulatory framework, Dubai aims to attract serious players in the virtual asset space while simultaneously protecting investors and maintaining the integrity of its financial system.

The Company Rulebook: A Cornerstone of VARA’s Regulatory Framework

Central to VARA’s regulatory architecture is the Company Rulebook, a crucial component of the Virtual Assets and Related Activities Regulations 2023. This document provides a meticulous blueprint for how VASPs should structure and operate their businesses within Dubai’s burgeoning virtual asset ecosystem. Below, we explore the key aspects of this groundbreaking regulatory framework in detail.

1. Company Structure and Ownership Transparency

VARA places paramount importance on transparency and clarity in corporate structures. This focus is not merely bureaucratic but a fundamental principle designed to prevent the virtual asset space from becoming a haven for illicit activities.

Legal Entity Requirement: VASPs are required to establish and maintain a legal entity in Dubai, in a form approved by local commercial licensing authorities. This ensures that virtual asset businesses have a physical presence in the emirate and are subject to local laws and regulations. It also provides a point of contact for regulators and a clear legal entity against which enforcement actions can be taken if necessary.

Clear Ownership Structure: The rulebook mandates a clear chain of ownership, with readily identifiable controlling entities and ultimate beneficial owners (UBOs). This prevents opaque ownership structures that could be exploited for money laundering, tax evasion, or other illicit purposes. By knowing who ultimately controls and benefits from a VASP, regulators can better assess risks and ensure accountability.

Complex Structures and DAOs: For VASPs with complex structures, such as those involving trusts, nominee arrangements, or Decentralized Autonomous Organizations (DAOs), VARA demands heightened scrutiny. These entities must provide detailed explanations of their structure, including:

• The rationale behind such complexity
• The relationship between the VASP and relevant DAOs
• How regulatory compliance will be maintained in a decentralized governance model
• Whether the inclusion of DAOs may adversely impact the VASP’s ability to comply with regulations
• The legal recognition status of relevant DAOs in other jurisdictions

This level of detail allows VARA to understand and assess the risks associated with complex corporate structures while still permitting innovation in organizational design.

Approval for Structural Changes: VASPs must secure VARA’s written approval before implementing any material changes to their company structure or adopting decentralized governance models. This provision allows VARA to maintain robust oversight as companies evolve and adapt to the dynamic virtual asset landscape, ensuring that VASPs cannot circumvent regulations by altering their structure after initial approval.

2. Board Composition and Governance

The rulebook sets forth exacting standards for VASP boards, emphasizing competence, integrity, and accountability. These requirements ensure that those at the helm of virtual asset businesses are capable of navigating the complex intersection of finance, technology, and regulation.

Board Composition: Boards must comprise individuals with requisite skills, knowledge, and expertise to effectively oversee the VASP’s operations. This includes expertise in areas such as blockchain technology, cybersecurity, financial regulation, and risk management. A diverse skill set on the board is crucial for providing comprehensive oversight of the VASP’s activities.

Fit and Proper Person Criteria: Each board member must be assessed and approved as a “Fit and Proper Person” according to VARA’s stringent criteria, which considers factors such as:

• Professional qualifications and experience
• Personal integrity and financial soundness
• Any history of regulatory, criminal, or professional misconduct

The annual reassessment ensures that board members maintain their suitability over time, allowing for the removal of those who no longer meet the criteria.

Appointment and Removal Procedures: VASPs are required to establish transparent procedures for the appointment and removal of board members, codified in the company’s constitutional documents. This ensures a clear and fair process for board changes, preventing arbitrary appointments or removals that could compromise the board’s independence or effectiveness.

Board Responsibilities: The board is ultimately responsible for:

• The VASP’s operations and business affairs
• Ensuring compliance with applicable laws and regulatory requirements
• Implementing a professional compliance culture within the VASP
• Overseeing risk management and internal control systems
• Engaging in regular communication with senior management and other key stakeholders

Chairman Election: The board must elect a chairman to oversee its effective functioning, setting the agenda for board meetings, ensuring all directors have the opportunity to contribute, and maintaining a productive relationship between the board and senior management.

Board Training: The rulebook mandates comprehensive training for board members. New appointees must undergo induction programs covering:

• The company’s structure, strategy, and objectives
• Financial and operational aspects of the VASP’s business
• Obligations, duties, and liabilities of board members
• Functions of board committees
• Key risks in the global virtual asset sector

Ongoing training is required for all board members to ensure they remain abreast of industry developments, regulatory changes, and emerging risks in the virtual asset space.

3. Responsible Individuals and Senior Management

To ensure clear lines of accountability, VARA has introduced the concept of Responsible Individuals and laid out comprehensive requirements for senior management.

Responsible Individuals: VASPs must appoint two Responsible Individuals responsible for the company’s regulatory compliance. These individuals must:

• Be full-time employees of the VASP
• Be UAE residents or passport holders
• Be approved by VARA as Fit and Proper Persons
• Continue to meet these requirements, with annual validation by the VASP

This personal accountability ensures that specific people within the organization can be held accountable for regulatory compliance.

Senior Management Structure: VASPs must document a clear management structure with well-defined roles, responsibilities, and accountability. This structure should set out:

• Reporting lines within the organization
• Authority delegated to each member of senior management
• The process for making key decisions

Qualifications of Senior Management: Senior management must comprise suitably qualified individuals with requisite skills, knowledge, and expertise expected in the global virtual asset sector. This includes expertise in areas such as blockchain technology, financial markets, risk management, and regulatory compliance.

Responsibilities of Senior Management: Senior management, under board oversight, is charged with:

• Managing day-to-day operations in compliance with regulations and board-approved policies
• Implementing business objectives and strategies approved by the board
• Providing regular reports to the board on the VASP’s operations and financial position
• Ensuring the VASP maintains adequate systems and controls

Restrictions on External Positions: To mitigate potential conflicts of interest, there are restrictions on senior management holding positions on other boards or in other companies. Any such positions typically require prior approval from the VASP’s board and are subject to conflict of interest screening.

4. Company Secretary: Ensuring Corporate Governance

VARA mandates the appointment of a company secretary to uphold best practices in corporate governance and ensure compliance with regulatory requirements.

Independence and Reporting Line: The company secretary must be independent of senior management and report directly to the board, ensuring effective fulfillment of their role without undue influence from management.

Key Responsibilities: The company secretary’s duties include:

• Documenting board meetings and preparing minutes
• Keeping records of all reports submitted to and prepared by the board
• Providing board members with meeting agendas and related documents
• Ensuring board members comply with approved actions
• Notifying board members of meeting dates well in advance
• Coordinating between board members and senior management
• Regulating the board’s disclosure record in accordance with applicable requirements

Appointment of External Entity: The board may appoint an external entity as company secretary, but such an arrangement is considered outsourcing and must adhere to specific regulatory requirements. This allows for flexibility while ensuring the integrity of the company secretary function is not compromised.

5. Implications for the Global Virtual Asset Ecosystem

VARA’s comprehensive regulatory framework, exemplified by its Company Rulebook, has far-reaching implications for the global virtual asset ecosystem.

Setting a New Regulatory Benchmark: By establishing detailed and stringent requirements for VASPs, Dubai sets a new benchmark for virtual asset regulation globally. Other jurisdictions may view VARA’s framework as a model, potentially leading to greater harmonization of virtual asset regulation worldwide.

Attracting Serious Players: The high standards set by VARA are likely to attract serious, well-established players in the virtual asset space who are willing and able to meet these requirements. This could legitimize the virtual asset industry and differentiate reputable operators from less scrupulous entities.

Enhancing Investor Protection: The emphasis on transparency, accountability, and proper governance enhances investor protection. By ensuring VASPs are well-governed and properly regulated, VARA aims to create a safer environment for virtual asset investors.

Fostering Innovation: While the regulatory requirements are stringent, they also provide a clear framework within which innovation can occur. Knowing the rules of the game allows virtual asset businesses to focus on developing new products and services without fear of regulatory uncertainty.

Challenges and Potential Drawbacks: The comprehensive nature of VARA’s regulations presents challenges. The high compliance costs associated with meeting these requirements could act as a barrier to entry for smaller or newer players in the virtual asset space. Additionally, over-regulation risks stifling innovation or driving virtual asset activities to less regulated jurisdictions.

A New Paradigm in Virtual Asset Regulation

Dubai’s VARA, through its comprehensive Company Rulebook, has established a regulatory framework that sets a new standard in the governance of virtual asset services. By mandating clear ownership structures, delineating board and management responsibilities, and ensuring robust oversight mechanisms, VARA aims to create a stable, transparent, and trustworthy environment for virtual asset activities.

This approach mitigates risks associated with virtual assets and positions Dubai as a leading global hub for the industry. As the virtual asset landscape continues to evolve, VARA’s regulatory framework provides a solid foundation for sustainable growth and innovation, balancing financial stability with the opportunities presented by this transformative technology.

The establishment of VARA and its detailed regulatory framework represents a significant step forward in the global conversation on virtual asset regulation. As other jurisdictions grapple with effective oversight of this nascent industry, Dubai’s approach offers a compelling model that could influence regulatory thinking worldwide.

By setting high standards for corporate governance, transparency, and accountability, VARA is not just regulating the virtual asset industry – it’s shaping its future. As the virtual asset ecosystem matures, the principles embedded in VARA’s regulatory framework – transparency, accountability, and robust governance – are likely to become increasingly important.

The success of VARA’s approach will be closely watched by regulators, industry participants, and investors globally. If successful, it could pave the way for greater mainstream adoption of virtual assets, as increased regulation and oversight help build trust in this emerging asset class. However, the true test will be in the implementation and enforcement of these regulations and in their adaptability to the rapidly changing landscape of virtual assets.

Moving forward, the interplay between regulation and innovation in the virtual asset space will continue to be a critical area of focus. Dubai’s bold step in establishing VARA and its comprehensive regulatory framework may well be remembered as a pivotal moment in the evolution of virtual asset regulation, setting the stage for a more mature, stable, and trusted virtual asset ecosystem globally.

---

Published by Hassam Raoon