Can you sue a UAE service provider for professional negligence?

A UAE company that loses money because of bad advice from an auditor, a flawed design from an engineer, or a missed deadline from a lawyer has two routes to recover: a contract claim under the engagement letter, or a tort claim under the Civil Transactions Law. The choice between them controls the time limit, the heads of damage available, and whether any liability cap in the engagement letter survives. Most claimants pick the wrong route, and most defendants discover the limitation problem only after the file is already cold.

• The general statutory basis for professional fault sits in Articles 282 and 293 of the Civil Transactions Law (Federal Law No. 5 of 1985). Article 282 makes any person who causes harm to another liable to make good that harm, whether the harm flows from a positive act or an omission.
• For tort claims, Article 298 of the Civil Code gives the claimant three years from the date the victim knew of both the harm and the identity of the person responsible, with a hard long-stop of fifteen years from the date of the harmful act itself.
• Auditors and accounting firms now operate under Federal Decree-Law No. 41 of 2023 on the Regulation of the Accounting and Auditing Profession, in force since 28 March 2024. The law mandates professional indemnity insurance for every licensed firm and exposes individual chartered accountants to administrative fines of up to AED 1 million, suspension, or licence revocation, on top of any civil claim.
• Medical practitioners and facilities are governed by Federal Decree-Law No. 4 of 2016 on Medical Liability. Compensation claims cannot be heard by a UAE court until the Medical Liability Committee has issued its expert report, and that report usually decides the outcome in practice.
• Construction professionals carry the most onerous regime in UAE law: under Article 880 of the Civil Code, architects and contractors remain jointly liable for structural defects for ten years from delivery, regardless of fault and regardless of any contrary clause in the contract.
• A liability cap or exclusion in the engagement letter is enforceable for ordinary breach of contract, but UAE courts will not give effect to it where the conduct amounts to fraud, gross negligence, or a criminal offence. In those cases the client can elect to sue in tort and bypass the cap entirely.

Who this applies to

This guide is written for two audiences who tend to read the same article from opposite sides of the table.

The first group is UAE companies and their in-house counsel who have suffered loss because of work done by a service provider: auditors who signed off on accounts that hid a fraud, lawyers who missed a filing window, consultants whose tax memo turned out to be wrong, engineers whose drawings caused a defect, brokers who placed cover that did not respond, IT vendors whose implementation broke a control. These readers want to know whether the loss is recoverable, from whom, by when, and how much it is realistically worth.

The second group is the service providers themselves, particularly UAE-licensed audit firms, professional services firms, medical facilities, engineering consultancies, and any business whose engagement letters carry a liability cap. These readers want to understand where the cap holds, where it does not, and what the firm's actual exposure looks like once the cap falls away.

The position is broadly the same whether the service provider is a mainland company, an ADGM or DIFC entity, or a foreign firm operating through a branch, but the procedural route and the applicable court differ. ADGM and DIFC claims sit under common-law-style rules with longer general limitation periods. Mainland claims sit under the Civil Code regime described below.

The two routes: contract claim or tort claim

Under UAE law a client who has retained a service provider has a contractual relationship with that provider. The default position, applied by the Court of Cassation in a long line of cases, is that the client must frame any claim within the four corners of that contract. The provider's obligations, the standard of care, the heads of recoverable loss, and any agreed cap are all read first from the engagement letter.

The exception matters more than the rule. If the conduct complained of involves fraud, gross negligence, or a criminal act, the client may elect to sue in tort under Articles 282 and 293 of the Civil Code instead of, or in parallel with, the contract claim. This election is the key strategic decision in any professional negligence file in the UAE, for three reasons.

Damages are wider in tort

A contract claim is limited to direct, foreseeable losses flowing from the breach. A tort claim under Article 292 covers the actual loss sustained and the loss of profit, provided both are a natural result of the harmful act, and is not constrained by what was foreseeable at the date of the contract. Article 293 also allows moral damages for non-financial harm, which the courts will award in appropriate cases.

Liability caps fall away

Any clause in an engagement letter that purports to cap or exclude liability for fraud, wilful misconduct, or gross negligence is unenforceable as a matter of UAE public policy. A cap that says "in no event shall the firm's total liability exceed the fees paid in the preceding twelve months" will work for an ordinary error of judgment. It will not work where the client can show that the partner signed a clean audit opinion knowing the underlying numbers were wrong.

The limitation clock runs differently

Contract claims under the Civil Code run for fifteen years under Article 473. Commercial contract claims between merchants run for ten years under Article 92 of the Commercial Transactions Law. Tort claims, by contrast, run for the much shorter three-year period in Article 298. In most professional negligence files the contract route is therefore the safer one for limitation purposes, even when the tort election is open.

Sector-specific regimes layered on top of the Civil Code

The Civil Code framework is the floor. Several sectors have their own statutory regimes that add specific obligations, specific procedures, or specific penalties to it.

Auditors and accounting firms

The Federal Decree-Law No. 41 of 2023 replaced the old Federal Law No. 12 of 2014 and is the primary statute governing audit and accounting firms licensed by the Ministry of Economy. The headline points for liability exposure are these.

Every licensed accounting firm must hold professional indemnity insurance at all times. The Implementing Regulation sets the minimum scope and treats failure to maintain cover as a disciplinary matter under Article 24. A firm that lets cover lapse not only exposes itself to a direct claim but also to administrative penalties that include suspension of the licence.

Chartered accountants are personally accountable. Federal Decree-Law No. 41 of 2023 introduces a graduated disciplinary regime under which a Chartered Accountant who breaches professional standards or ethics can face a written warning, an administrative fine of between AED 10,000 and AED 1 million, suspension of the professional licence for up to three years, or full revocation. These penalties are independent of any civil claim brought by an aggrieved client.

The reporting obligation is now sharper. Audit firms must report any fraud or money laundering they detect or suspect during the engagement to the Ministry and the Central Bank of the UAE Financial Intelligence Unit. A firm that signs off on accounts and fails to report a known irregularity is exposed both to administrative action and to the argument, in any later civil claim, that the failure to report was itself the gross negligence that breaks any contractual liability cap.

Medical practitioners and healthcare facilities

Federal Decree-Law No. 4 of 2016 on Medical Liability and its implementing regulation (Cabinet Decision No. 40 of 2019) govern medical malpractice claims in the UAE. The defining procedural rule is in Article 17: no civil court may hear a medical malpractice claim until the Medical Liability Committee, established at the relevant health authority, has issued its expert report on whether a medical error occurred and, if so, whether it was a "gross medical error".

The committee's report is appealable, within 30 days, to the Supreme Committee for Medical Liability, whose decision is final and not subject to further challenge. UAE courts overwhelmingly adopt the committee's findings on liability and confine the trial to quantum. For a claimant, this means the case is effectively decided at the committee stage rather than in court. For a healthcare facility, it means the technical defence in front of the committee matters more than the legal defence in front of the judge.

The 2016 law also requires every practising medical professional and every facility to hold medical malpractice insurance. Patients can, in some circumstances, bring a direct claim against the insurer.

Engineers, architects, and contractors

Construction professionals carry the most demanding statutory regime in UAE civil law. Articles 880 to 883 of the Civil Code impose decennial liability: the architect and the contractor are jointly liable to the employer for any total or partial collapse of the building, and for any defect that threatens its stability or safety, for ten years from the date of delivery.

The liability is strict in character. The employer does not have to prove fault, and any clause in the contract that purports to exclude or shorten the ten-year period is void. The limitation period for a claim under Article 880 is three years from the date of the collapse or the discovery of the defect.

For non-decennial claims (delays, cost overruns, design errors that do not affect stability), the engineer's liability is governed by the engagement contract and by the general fault-based rules in Articles 282 and 293. The construction sector also operates under FIDIC-style contractual mechanisms that interact with these statutory rules in ways that require careful drafting and timely notice of claims.

What the claimant has to prove

The same four elements apply across every sector and every cause of action: duty, breach, causation, and damage. UAE courts apply them strictly and place the burden squarely on the claimant.

Duty of care

The duty arises either from the engagement contract or from the general statutory duty in Article 282 not to cause harm to others. For regulated professions (auditors, doctors, lawyers, engineers), the standard of care is fixed by the relevant professional standards: International Standards on Auditing for chartered accountants, the standards adopted by Ministerial Decision No. 195-3/2024 for the audit and accounting profession, the standards approved by the Dubai Health Authority and the Department of Health Abu Dhabi for medical practitioners, and so on. A claimant who cannot identify the applicable standard usually loses on the breach question before the court reaches causation.

Breach

Breach is measured against the reasonable competent professional in the same field, in the UAE, at the time the work was done. The standard is not perfection. A doctor who follows accepted clinical guidance is not negligent because a different doctor might have chosen a different treatment. An auditor who applies the right ISA standard is not negligent because a fraud was sufficiently sophisticated to evade a properly designed audit. The court will usually need an independent expert opinion on the standard of care, and in medical claims the Medical Liability Committee's report functions as that expert opinion.

Causation

The claimant must show that the breach actually caused the loss. UAE courts apply a "direct cause" test that excludes losses too remote from the wrongful act. For an audit failure, this usually means the claimant has to show what would have happened if the audit had been done properly: the fraud would have been detected, the company would have stopped paying, the loss would have been smaller. Without that counterfactual the claim fails on causation even if the breach is obvious.

Damage

Damage must be actual and provable. UAE law does not award nominal damages and does not award punitive damages. Article 292 of the Civil Code allows recovery of the loss actually suffered and the loss of profit, provided both are a natural consequence of the harmful act. Article 293 allows moral damages where appropriate. The claimant has the burden of proving each head with evidence; courts will not estimate.

Limitation periods by claim type

Professional negligence files almost always involve a limitation question, often as the first defence raised. The applicable period depends on how the claim is framed and where it is brought.

The shorter tort period catches a lot of claimants. A company that discovers in 2026 that an audit signed in 2020 missed a material fraud has under three years from the date of discovery to file. If the company sits on the file while it tries to settle with the auditor, the limitation period keeps running. A formal notarised legal notice will interrupt limitation; settlement correspondence will not.

Contract route versus tort route in practice

The strategic choice between contract and tort comes down to four questions, summarised below.

Enforcement, insurance, and recovery

A favourable judgment is worth what the defendant can pay. In professional negligence claims this almost always means the answer is the defendant's insurer rather than the defendant's balance sheet. Three points matter for any UAE claimant assessing recoverable value before incurring legal costs.

Professional indemnity cover is mandatory for licensed audit firms under the 2023 law and for medical practitioners and facilities under the 2016 law. It is not mandatory for most other professions, though large engineering consultancies, law firms, and consultancies usually carry it. A claimant should ask about cover at the pre-action stage, because the answer often determines whether the file is worth running.

The insurer is rarely a party to the proceedings unless a direct action is permitted. In medical claims, the courts have allowed direct actions against the insurer of the facility where the policy permits it. In other sectors, the claimant typically obtains a judgment against the firm and then enforces against the firm, with the firm relying on its insurer to fund the payment. Reinsurance is invisible to the claimant.

UAE courts do not award legal costs on a recoverable basis comparable to common-law jurisdictions. A successful claimant recovers the court fees and a token contribution to legal fees. The economics of a professional negligence claim therefore look quite different from the equivalent claim in London or Singapore. This shapes the threshold below which a claim is not worth running on commercial grounds, even if the legal merits are strong.

These considerations sit alongside the broader question of when individuals connected to a UAE company can be held personally liable for the company's exposures, which often arises in the same factual matrix as a professional negligence claim against the company's external advisers. They also overlap with the statutory liability framework for advisors involved in capital raising and with the broader professional standards framework that now applies to UAE-licensed advisers.

What companies should do next

Five things make the practical difference between a viable claim and a written-off loss.

A claimant should preserve the engagement letter, every iteration of the work product, and the whole email trail with the service provider before any letter of claim is sent. Service providers tighten their files quickly once a complaint is in the air. The contemporaneous record is often the only contemporaneous record that survives.

A claimant should diary the limitation date as soon as the loss is identified, and treat it as the three-year tort date rather than the longer contract date. The shorter date leaves room to manoeuvre. The longer date does not.

A claimant should commission an early independent expert view on whether the standard of care was breached. In medical claims this view will be tested against the Medical Liability Committee's report. In audit and engineering claims, an independent expert opinion is the difference between a credible claim and a speculative one, and it will shape any settlement discussion before proceedings are issued.

A service provider should review every engagement letter the firm has on foot to see whether the liability cap is drafted in language that engages public policy concerns. Caps that exclude liability for "any" cause, including fraud or gross negligence, will not be enforced and may invite a court to disregard the whole clause rather than read it down.

A service provider should also confirm that its professional indemnity cover responds to the claims actually being made against the firm, that the policy limits are adequate to the size of the engagements being signed, and that the notification clauses are being followed. Late notification is the most common reason a UAE professional indemnity insurer declines to indemnify.

How should UAE companies handle a professional negligence claim against a service provider in 2026?

Professional negligence claims in the UAE are won and lost on the early decisions: which route to plead, when the limitation clock started, what the standard of care actually was, and whether the defendant's professional indemnity cover will respond. A company that waits twelve months to take advice on a possible audit failure or a flawed engineering report has usually lost half the limitation period and most of the contemporaneous evidence by the time the file reaches a lawyer.

The single highest-risk gap, in our experience, is the three-year tort limitation period under Article 298 of the Civil Code. It runs from the date the client knew of the harm and the identity of the person responsible, and it cannot be waived by goodwill discussions with the service provider. The claimant who treats the contract limitation period as the safe default loses the option to elect into the tort route at the moment the option is most valuable.

For UAE companies investigating a possible claim against an auditor, consultant, engineer, doctor, or other service provider, and for professional firms defending one, our corporate and disputes team can review the engagement file, assess the limitation position, and give a view on the realistic route to recovery before any costs are committed.

‍