Country-by-Country Reporting (CbCR) in Saudi Arabia: Who Must File and When

For multinational groups, Saudi tax compliance is no longer limited to filing a local income tax or Zakat return. Large groups must also show how revenue, profit, employees, taxes, and business activity are distributed across countries.

That is why CbCR Saudi Arabia is an important topic for CFOs, tax directors, transfer pricing teams, finance controllers, and multinational group reporting teams. Country-by-Country Reporting helps ZATCA assess whether a multinational enterprise group’s taxable profits appear aligned with its real economic activity across jurisdictions.

For Saudi entities that belong to large multinational groups, the key questions are clear: Does the SAR 3.2 billion threshold apply? Is the Saudi entity required to submit the full CbC Report or only a notification? Who is the responsible reporting entity? What is the deadline? And how does CbCR connect with transfer pricing documentation?

Disclaimer: This article is for educational guidance only. CbCR rules, ZATCA filing procedures, reporting formats, penalties, and transfer pricing requirements may change. Businesses should confirm current obligations directly with ZATCA and qualified Saudi tax advisers.

What CbCR Is and Why ZATCA Requires It

Country-by-Country Reporting, or CbCR, is a transfer pricing transparency requirement for large multinational enterprise groups. It requires reporting of key financial and operational information by tax jurisdiction.

The purpose is not to replace the tax return. Instead, CbCR gives tax authorities a high-level risk assessment tool. It helps regulators compare where a group earns revenue, reports profits, pays taxes, employs people, holds assets, and conducts business activity.

ZATCA’s official Exchange of Annual Country-by-Country Reports service explains that CbCR allows the exchange of information for multinational groups under the relevant multilateral agreement and transfer pricing guidelines.

A CbC Report typically includes jurisdiction-level information such as:

CbCR does not automatically mean a company has done something wrong. However, unusual differences between revenue, profit, tax paid, employees, and assets may trigger questions from tax authorities.

In Saudi Arabia, CbCR sits within the wider transfer pricing framework. ZATCA’s Transfer Pricing page explains the importance of applying the arm’s length principle to transactions between related persons or persons under common control.

The SAR 3.2 Billion Consolidated Revenue Threshold

The key threshold for CbCR threshold KSA is consolidated group revenue of SAR 3.2 billion or more.

Under Saudi transfer pricing rules, CbCR applies to multinational enterprise groups that meet the consolidated revenue threshold. ZATCA’s official Transfer Pricing Bylaws refer to multinational groups with group revenue exceeding SAR 3.2 billion for CbCR purposes.

This threshold is measured at the multinational group level, not only at the Saudi entity level. That is a critical distinction. A Saudi subsidiary may be relatively small locally, but if it belongs to a global group whose consolidated revenue exceeds SAR 3.2 billion, the Saudi entity may still have CbCR-related obligations.

A simplified threshold review:

The mistake many companies make is checking only Saudi revenue. The threshold should be assessed based on the consolidated revenue of the multinational group.

For finance teams that need stronger knowledge across Saudi tax, Zakat, corporate tax, and transfer pricing compliance, Saudi Arabia Zakat, VAT, and Corporate Tax Compliance Certificate can support a broader understanding of how group reporting connects with local tax obligations.

CbCR Notification vs the Full Report

One of the most important distinctions is between CbCR notification Saudi Arabia and the full CbC Report.

They are not the same.

The notification tells ZATCA whether the Saudi entity is the ultimate parent entity, surrogate parent entity, or another constituent entity, and identifies which group entity will file the full CbC Report and in which jurisdiction.

The full CbC Report contains the actual jurisdiction-by-jurisdiction data for the multinational group.

A Saudi company may not be responsible for filing the full report if the ultimate parent entity files in another country and exchange conditions are satisfied. However, the Saudi entity may still need to submit a notification to ZATCA.

A simplified example:

The notification is important because it tells ZATCA where to expect the report. If the notification is missing, wrong, or inconsistent with the group’s actual filing position, it can create compliance risk.

Filing Deadlines and the Responsible Entity

CbCR compliance depends on two separate timing questions: when the notification is due and when the full CbC Report is due.

ZATCA’s official FAQ states that the CbC Report is expected to be filed in the approved format within 12 months of the fiscal year of the MNE group. Candidates and companies should review ZATCA’s CbCR deadline FAQ for the current official wording.

The notification deadline should also be reviewed carefully under the transfer pricing rules and ZATCA portal requirements. In many practical CbCR frameworks, notification is expected by or before the end of the reporting fiscal year, but companies should confirm the current Saudi requirement through ZATCA before relying on internal calendars.

A practical deadline view:

The responsible entity depends on the group structure.

For calendar-year groups, a full CbC Report for the year ending 31 December would generally be expected within 12 months after year-end. However, each group should confirm the relevant reporting year, parent entity, reporting jurisdiction, ZATCA portal status, and exchange arrangements.

How CbCR Connects to Transfer Pricing Documentation

CbCR is only one part of transfer pricing compliance. It works alongside the Master File, Local File, controlled transaction disclosure, intercompany agreements, benchmarking, and the arm’s length analysis.

ZATCA’s Submission of Transfer Pricing Documentation service applies to taxpayers subject to the Transfer Pricing Bylaws who are required to submit transfer pricing documentation.

A strong transfer pricing file normally connects these layers:

The CbC Report can highlight risks that should be explained by the Master File and Local File. For example, if a jurisdiction has high profit but few employees, low tangible assets, or limited functions, ZATCA or another tax authority may ask questions. If a Saudi entity has large related-party payments, but weak local documentation, the risk increases.

Typical CbCR-to-transfer-pricing review questions include:

• Does the Saudi entity’s profit match its functions, assets, and risks?

• Are related-party payments supported by intercompany agreements?

• Does the Local File explain Saudi controlled transactions clearly?

• Does the Master File align with the CbCR data?

• Are management fees, royalties, financing charges, and service fees arm’s length?

• Do financial statements reconcile with tax filings and TP disclosures?

• Are low-margin or loss-making Saudi entities properly explained?

• Are high-profit low-substance jurisdictions creating risk signals?

CbCR should therefore not be treated as a separate form. It should be reviewed as part of the full transfer pricing story.

Penalties for Missing a CbCR Filing

Missing a CbCR filing can create regulatory and tax risk. The exact penalty exposure depends on the type of failure, timing, facts, and applicable ZATCA rules.

Potential CbCR compliance failures may include:

ZATCA’s transfer pricing framework gives the authority a basis to request documentation, assess related-party arrangements, and review whether Saudi taxpayers comply with arm’s length requirements. A missing or weak CbCR process may also lead to broader questions about transfer pricing governance.

The safest approach is to create a CbCR control calendar and assign responsibility early. Large multinational groups should not wait until year-end to decide who files what.

CbCR Readiness Checklist

Use this checklist before the reporting year closes.

Group Threshold

• Has the group’s consolidated revenue been checked?

• Does the group meet or exceed SAR 3.2 billion?

• Is the threshold tested using group-level consolidated financials?

• Has the reporting fiscal year been confirmed?

• Is documentation retained for the threshold conclusion?

Entity Classification

• Is the Saudi entity a constituent entity?

• Is the Saudi entity the ultimate parent entity?

• Is there a surrogate parent entity?

• Which entity will file the full CbC Report?

• In which jurisdiction will the full report be filed?

Notification

• Is a Saudi CbCR notification required?

• Has the reporting entity been identified correctly?

• Is the filing jurisdiction correct?

• Is the notification deadline recorded?

• Has submission evidence been saved?

Full CbC Report

• Is the report required in Saudi Arabia?

• Is the CbCR data complete and validated?

• Are revenue, profit, tax, employee, and asset numbers reconciled?

• Is the report submitted within 12 months after year-end?

• Is exchange-of-information status considered?

Transfer Pricing Connection

• Does the Master File align with the CbCR data?

• Does the Local File explain Saudi controlled transactions?

• Are intercompany agreements current?

• Are controlled transactions disclosed correctly?

• Are unusual profit or loss positions explained?

Near the end of a CbCR and transfer pricing readiness project, Saudi Arabia Zakat, VAT, and Corporate Tax Compliance Certificate can help finance and tax teams strengthen their understanding of Saudi tax governance, documentation discipline, and audit-ready reporting.

Common CbCR Mistakes to Avoid

CbCR mistakes often happen because Saudi finance teams assume the group tax department handles everything globally. That may be partly true, but the Saudi entity still needs local evidence and coordination.

Common mistakes include:

• checking Saudi revenue instead of global consolidated revenue;

• missing the SAR 3.2 billion threshold review;

• assuming no filing is needed because the parent files abroad;

• forgetting the Saudi notification;

• using the wrong reporting entity name;

• filing inconsistent information across jurisdictions;

• not reconciling CbCR with the Master File and Local File;

• ignoring exchange-of-information issues;

• failing to save submission confirmations;

• treating CbCR as separate from transfer pricing documentation;

• waiting until the deadline to ask the global parent for data.

A strong Saudi CbCR process should be owned jointly by local finance, group tax, transfer pricing, and legal teams.

Conclusion

CbCR Saudi Arabia is a critical compliance requirement for large multinational groups with Saudi entities. The SAR 3.2 billion consolidated revenue threshold means that even a relatively small Saudi subsidiary may have CbCR obligations if it belongs to a large global group.

The main compliance challenge is understanding the difference between CbCR notification and the full CbC Report. A Saudi entity may only need to notify ZATCA where the group report is filed, or it may need to file the full report depending on its role and the group structure.

CbCR also connects directly to transfer pricing documentation. The report gives ZATCA a high-level view of where the group earns revenue, reports profits, pays tax, employs people, and holds assets. If that view does not match the group’s transfer pricing story, further questions may follow.

The safest approach is early planning: check the threshold, classify the Saudi entity, confirm the reporting entity, track deadlines, align the Master File and Local File, and maintain clear evidence of every submission.