Picking the right ESG reporting framework GCC regulators now expect has gone from a nice-to-have to a compliance deadline with real penalties attached, almost overnight. Every stock exchange in the region has introduced ESG disclosure requirements, and the frameworks they point to are converging on one baseline — even as country-specific rules layer extra obligations on top.
Here is what’s actually mandatory where, which framework to build around, and how to avoid rebuilding your reporting system every time a regulator tightens its rules.
ESG REPORTING FRAMEWORK GCC REGULATORS ARE CONVERGING AROUND
Across the region, one framework keeps showing up as the reference point regulators build their own rules on top of: the ISSB’s IFRS S1 and S2 sustainability disclosure standards. Qatar, Kuwait, and Bahrain regulators explicitly require alignment with it. The UAE’s Securities and Commodities Authority has moved toward mandating it for listed companies. Saudi Arabia’s Tadawul references it as the direction its own guidelines are heading, even without a confirmed universal mandate yet.
That makes ISSB the closest thing the GCC has to a common baseline. It does not replace the GRI Standards, which most exchanges still reference for the broader stakeholder-facing metrics — emissions, water, waste, workforce data — that ISSB’s more investor-focused standards don’t fully cover. In practice, most GCC-listed companies now need to report against both: ISSB for financially material sustainability risk, GRI for the fuller sustainability picture.
Older frameworks like TCFD and SASB have not disappeared, but both have effectively been folded into ISSB’s standards — TCFD’s climate-risk disclosure recommendations now sit inside IFRS S2, and SASB’s industry-specific metrics are being incorporated into ISSB’s future standards. If your reporting stack still treats these as separate deliverables, this is a good moment to consolidate.
WHAT’S ACTUALLY MANDATORY, COUNTRY BY COUNTRY
UAE. Two layers apply. The Climate Law (Federal Decree-Law No. 11 of 2024) requires qualifying companies to measure and report greenhouse gas emissions, with fines running from a lower five-figure amount up to AED 2 million for repeat non-compliance. Separately, ADX and DFM-listed companies must file annual sustainability reports within 90 days of financial year-end or before the AGM, and the Securities and Commodities Authority is moving listed companies toward ISSB-aligned reporting. ADGM entities above certain size thresholds have their own separate ESG Disclosures Framework.
Saudi Arabia. The CMA and Tadawul have built toward a mandate in stages since 2019 — voluntary guidelines, then a structured GRI/SASB-aligned framework, then binding disclosure requirements for green and sustainability-linked debt issuers. Premier Market companies are now expected to publish ESG reports against a defined set of KPIs. A universal mandatory deadline has not been confirmed, but the direction is unmistakable.
Qatar. Banks and regulated financial institutions report to the Qatar Central Bank; QSE-listed companies are moving toward mandatory ISSB-aligned disclosure via the Qatar Financial Markets Authority; large regulated firms within the Qatar Financial Centre answer to the QFCRA. Multiple regulators, converging on the same standard.
Kuwait. Boursa Kuwait’s ESG Disclosure Guide, aligned with ISSB, now requires Premier Market-listed companies to publish sustainability reports.
Bahrain. The Central Bank of Bahrain requires ESG reporting from listed corporates and financial institutions, covering Scope 1–3 emissions aligned with GRI, with financial penalties for non-compliance.
Oman. A 2025 administrative decision made sustainability reporting mandatory for companies listed on the Muscat Stock Exchange, requiring disclosure against a defined set of GRI-aligned metrics early in the financial year.
Treat every figure and deadline above as a starting point, not a final answer — reconfirm against your own exchange or regulator before you build a compliance timeline around it, since this is one of the fastest-moving regulatory areas in the region right now.
HOW TO CHOOSE WITHOUT OVER-BUILDING YOUR REPORTING STACK
- Start with ISSB as your baseline. It’s the framework nearly every GCC regulator references, directly or as their stated direction of travel.
- Layer GRI on top for stakeholder-facing metrics ISSB doesn’t fully cover — this is what most exchanges still expect alongside the financial-materiality lens.
- Check your specific exchange and jurisdiction rules rather than assuming a neighbouring country’s requirements apply to you — UAE, Saudi, Qatar, Kuwait, Bahrain, and Oman all have distinct mandates and timelines.
- Build your GHG inventory (Scope 1, 2, and increasingly 3) early. Nearly every mandate in the region requires it in some form, and it takes months to build properly the first time.
- Don’t treat ESG reporting as a standalone project. It overlaps heavily with your existing management system data — our QHSE integration guide [LINK #3] covers how to avoid duplicating data collection across ISO 14001, ISO 45001, and ESG reporting obligations.
WHERE THIS CONNECTS TO YOUR EXISTING ISO SYSTEMS
If you’re already certified to ISO 14001, you have a head start — much of the environmental data your EMS already tracks maps directly onto GRI and ISSB environmental metrics. Our ISO 14001:2026 transition guide and Net Zero UAE 2050 guide both cover the environmental data foundation this reporting sits on. If your ESG scope extends into data governance, our PDPL Saudi Arabia guide covers the adjacent compliance obligation many GCC businesses are tackling in parallel this year.
NOT SURE WHERE YOUR BUSINESS STANDS?
ESG reporting readiness varies enormously by sector, exchange listing, and jurisdiction — there is no single checklist that fits every GCC business. If you need help mapping your specific obligations, visit our shop for consulting services and ISO document packs that build the underlying management system data your ESG reporting will draw on.