The Dubai Financial Services Authority (DFSA) has fined Moody's Investors Service Middle East Limited Dh2.15 million ($585,825) for breaching data confidentiality regulations over a period stretching from December 2023 to May 2026. which oversees firms operating within the Dubai International Financial Centre, the credit rating agency's regional unit was found responsible for seven incidents of inadvertent data disclosure. Four of those incidents involved confidential information being shared with recipients outside the company.
Alan Linning, DFSA Managing Director for Enforcement, said firms operating in the DIFC must ensure that confidential information is protected from unauthorised access or disclosure, warning that such lapses can undermine the integrity, stability and orderly functioning of financial markets.
The penalty reflects the DFSA's increasingly strict stance on data governance among the international banks, insurers and rating agencies based in the DIFC, one of the region's largest financial hubs. Moody's Middle East unit forms part of the wider US-based credit rating group, which plays a significant role in assessing sovereign and corporate risk across the Gulf region.
The fine is among the more notable enforcement actions taken by the DFSA this year, underscoring the regulator's focus on data confidentiality as financial institutions in Dubai handle growing volumes of sensitive market information.