From Compliance to Operational Assurance: What Dubai’s New Building Safety Law Means for Facility Management
- 21 hours ago
- 8 min read
Dubai’s built environment is entering a new phase. The focus is expanding beyond the construction of world-class assets to how those buildings are maintained, protected and managed throughout their operational lives.
For decades, much of the Middle East’s property story has centred on development: new communities, commercial towers, tourism assets, infrastructure and increasingly ambitious mixed-use projects. The next challenge is ensuring those assets remain safe, efficient and valuable long after construction and handover.
Dubai Law No. 3 of 2026 Concerning the Quality and Safety of Buildings makes that shift particularly clear.
The law establishes a more structured framework for building assessment, periodic maintenance, defect rectification and Quality and Safety Certification. It also gives Dubai Municipality responsibility for developing a comprehensive digital building management and maintenance system supported by a unified building database.
For building owners, management entities, property operators and facility management providers, this is more than a certification requirement. It strengthens the need for lifecycle accountability, trusted building data and evidence that identified risks have been addressed.
What does Dubai Law No. 3 of 2026 introduce?
The law is intended to improve building quality, preserve structural integrity, support occupant wellbeing and reduce building-related accidents through timely and periodic maintenance.
Its provisions apply across Dubai, including special development areas and free zones such as the Dubai International Financial Centre, subject to the definitions and exemptions contained within the law. The Government of Dubai’s announcement also highlights the law’s focus on building sustainability, safe operation and the protection of lives and property.
Under the framework, owners must obtain a Quality and Safety Certificate after 20 years have passed from the date on which the building’s Completion Certificate was issued.
Buildings under 20 years old are not outside the maintenance conversation. Owners must continue to undertake periodic maintenance and rectify defects that could create risks to the structural safety of the building, its occupants, surrounding properties or public safety.
The certification process requires an approved engineering firm to inspect the building and prepare a technical report. The assessment must consider areas including:
Structural integrity
Exterior cladding
Electrical and mechanical installations in external and common areas
Windows, doors and facade safety barriers
Dubai Civil Defence safety requirements
CCTV requirements prescribed by the Security Industry Regulatory Agency
Where defects are identified, an implementation plan and proposed rectification timeframe must be submitted through the Digital Window established under the law. The owner must then appoint an authorised contractor, supervised by the engineering firm, to complete the required work.
The relevant authority will verify that the defects identified in the technical report have been rectified before issuing the Quality and Safety Certificate.
For jointly owned property, the designated management entity assumes many of the owner’s operational duties. These include obtaining the certificate and appointing the engineering and contracting firms required to assess and rectify defects.
Certificates will generally remain valid for:
Ten years for buildings whose Completion Certificates were issued less than 40 years ago
Five years for buildings whose Completion Certificates were issued 40 years ago or more
Obtaining a certificate does not remove the ongoing obligation to maintain the property or address defects that emerge during the certification period.
The potential consequences of non-compliance are significant. The law provides for fines of up to AED 1 million, rising to a maximum of AED 2 million where the same violation is repeated within two years. Authorities may also suspend building permit activity or the consideration of certain applications connected with the affected property.
The detailed implementing resolutions will therefore be important. The law provides a one-year compliance period from the date it comes into force, which may be extended for an additional year.
The real operational challenge is closing the loop
While the certification process is engineering-led, its implications extend into everyday facility management.
Compliance will depend on more than arranging a technical assessment every five or ten years. Owners and management entities will need reliable evidence showing:
What assets and building systems exist
When inspections and maintenance activities took place
What defects were identified
Which actions were approved
Who was responsible for completing the work
Whether the contractor was appropriately qualified
Whether the required work was completed on time
What evidence supports closure
When certificates, inspections and compliance records require renewal
The core challenge is closing the loop between inspection, action and evidence.
A work order can show that a maintenance task was raised. Operational assurance requires more. It means being able to demonstrate that the correct action was assigned, that it addressed the identified defect or risk, that it was completed within the required timeframe and that supporting evidence is available.
This creates a need for connected records across:
Asset registers and building locations
Planned and preventive maintenance
Building condition assessments
Technical reports and supporting documentation
Contractor licences, qualifications and insurance
Defect rectification work orders
Approvals, inspections and completion evidence
Compliance dates and certificate renewals
A spreadsheet may record an expiry date, and an email may confirm that a contractor attended. Neither provides the same level of operational visibility as a structured system connecting the building, asset, inspection, responsible party, corrective action and supporting evidence.
This is the difference between recording maintenance activity and establishing operational assurance.
Why building safety belongs beyond the FM team
Building safety has often been treated primarily as a technical, compliance or maintenance responsibility.
The new framework reinforces why asset condition should also be considered across enterprise risk, financial planning, commercial continuity, technology strategy and operational governance.
For executive and senior management teams, the questions become broader:
Risk and governance: Are material building risks visible, assigned and escalated before they develop into larger operational, financial or reputational issues?
Financial and lifecycle planning: Is maintenance expenditure being prioritised based on asset condition, safety, business continuity and long-term asset value, rather than short-term cost alone?
Commercial performance: Could unresolved building defects affect tenants, occupants, service delivery, leasing activity, customer confidence or the ability to operate the asset?
Technology and data: Is building information fragmented across different systems, spreadsheets, reports and inboxes, or is there a trusted operational view connecting assets, inspections, defects and corrective work?
Operational execution: Can management see each material defect, who owns it, its current status, its required completion date and the evidence that it has been resolved?
The law does not make facility management a substitute for engineering judgement or executive oversight. It does, however, strengthen the need for FM teams to provide reliable information and accountable execution across the asset lifecycle.
The wider GCC is moving in the same direction
Dubai’s new building safety law sits within a broader regional shift towards more strategic facility and asset management.
A 2025 report from PwC Middle East and the Saudi Facility Management Association found that Saudi Arabia had seen approximately US$1.3 trillion in real estate and infrastructure projects since the launch of Vision 2030, with contracts awarded totalling around US$164 billion at the time of publication.
PwC and SFMA argue that effectively managing these assets will be critical to preserving service quality, operating performance, sustainability and long-term value.
The report identifies technologies including cloud-based CAFM platforms, mobile applications, building management systems, connected sensors, digital twins and predictive analytics as increasingly influential within FM operations. These technologies can help improve access to information, strengthen work-order management and support more proactive maintenance.
MEFMA President Jamal Lootah has similarly described facility management in the GCC as shifting from a traditionally operational function towards a strategic, value-driven role.
According to Lootah, FM is being integrated earlier in the project lifecycle, while data, connected systems, predictive maintenance and lifecycle planning are becoming more important to long-term asset performance.
However, there remains a gap between recognising the potential of technology and implementing it consistently.
The MEFMA white paper, Challenges Facing Technology Adoption in Facilities Management, draws on research involving 145 FM professionals and interviews with 12 senior industry leaders across the region.
The research found strong industry recognition of the value of smart technologies, but also identified persistent barriers including constrained budgets, resistance to long-term investment, legacy-system integration, digital skills gaps and regulatory uncertainty.
Leadership sponsorship, measurable pilot programmes, clear return-on-investment models and practical workforce training were identified as important adoption enablers.
The lesson is that technology alone is not the outcome.
The outcome is a safer building, a completed inspection, a resolved defect, a compliant contractor, a better-maintained asset and a management team that can demonstrate what happened.
From reactive maintenance to lifecycle accountability
Dubai’s new framework strengthens the case for moving beyond disconnected, reactive maintenance processes.
A modern FM operating environment should allow teams to connect each asset with its service history, planned maintenance schedule, condition information, compliance requirements, responsible contractors and associated documentation.
When a defect is identified, the resulting corrective action should be assigned, prioritised, tracked, escalated where necessary and closed with evidence.
This provides stronger control over the path from information to verified action.
It can also help decision-makers understand where risk is concentrated across a portfolio, where maintenance is being deferred, which contractors are meeting their responsibilities and where upcoming compliance or capital requirements may require attention.
That operational visibility supports more than regulatory compliance. It can inform lifecycle planning, contractor performance, asset investment, business continuity and long-term building performance.
The role of Urbanise FM
Software does not replace an engineering firm, authorised contractor, regulatory authority or professional judgement.
Its role is to provide the operational structure around those responsibilities.
Urbanise FM helps facility and property teams connect asset information, planned maintenance, inspections, work orders, workforce coordination, contractor compliance, corrective actions and supporting evidence within one cloud-based platform.
Rather than allowing technical findings to remain isolated in reports, inboxes or disconnected work orders, teams can connect those findings with the assets, responsible parties, deadlines and evidence needed to manage rectification.
This supports the move from:
Identifying defects to demonstrating closure
Managing activity to controlling outcomes
Fragmented records to portfolio-wide visibility
Reactive maintenance to lifecycle accountability
Disconnected data to informed operational decisions
Urbanise has an established presence in the Middle East, supported by regional team members and customer experience across facility, property and community management.
Published regional examples include SIBCA’s use of Urbanise as a CAFM solution, Emrill’s implementation of the Urbanise platform and Urbanise’s longstanding relationship with Al Mouj Muscat.
These examples reflect the wider role that connected operational systems can play in coordinating maintenance, improving visibility and creating a clearer record of responsibility and action.
A new standard for building stewardship
Dubai Law No. 3 of 2026 signals that building quality is not determined only during design, construction or handover.
It must be protected throughout the asset lifecycle.
That raises the expectations placed on owners, management entities, property operators and facility management providers alike.
As Dubai’s building stock matures and the GCC’s major development pipeline moves progressively into operation, FM will carry greater responsibility for protecting safety, business continuity, building performance and long-term asset value.
PwC, SFMA and MEFMA are pointing in the same general direction: facility management is becoming a more strategic discipline, supported by better data, stronger governance, connected technologies and proactive maintenance.
The organisations best prepared for this future will not necessarily be those producing the most reports or operating the most systems.
They will be those capable of turning building information into timely, accountable and documented action.
See how Urbanise FM supports safer, more accountable building operations
Connect asset information, planned maintenance, contractor compliance, corrective actions and supporting evidence in one cloud-based platform.
Complete our demo form to speak with the Urbanise Middle East team and see how the platform can support your buildings, portfolio and operational requirements.