A $200m enforcement case in the DIFC did not begin with a rogue trader or a fraudulent scheme. It began with a board that trusted the compliance reports it received and never asked whether they told the whole story.
According to Sherlocq, management prepares the update, the board signs it off, and somewhere between the two, the regulatory context that actually mattered gets thinned out, or was never gathered at all.
Sherlocq recently discussed what it sees as the board director’s compliance blind spot and why it matters.
This pattern is playing out across more than 30 jurisdictions, costing the industry $300bn a year, and now landing individual directors with personal fines of up to $50,000.
For much of the past two decades, regulatory compliance at board level ran on an informal principle of trust: the compliance function reports up, the board accepts the summary, and governance is considered discharged.
Regulators largely tolerated this arrangement. That era is ending. GCC regulators, including the DIFC and the DFSA, now expect what the rules call “active, informed oversight”, meaning directors must understand the regulatory environment their institution operates in rather than simply ratify management’s account of it.
The consequences are no longer abstract. Fines have been levied for failures as specific as providing false information or maintaining inadequate records, and enforcement actions have begun naming individual directors. The DFSA has been explicit that boards must demonstrate independent advisors and direct interventions, not passive receipt of management summaries.
The structural problem is that boards typically receive regulatory information through a single channel, management, with no practical means of independent verification.
Directors need three capabilities that have traditionally required expensive specialist resources: real-time verification of the regulatory landscape, the ability to assess documents against regulatory standards, and reliable sanctions intelligence across regimes such as OFAC, OFSI, the EU and the UAE’s own designations.
Sherlocq, which launched on 13 May 2026, positions itself as an AI-native regulatory intelligence platform built for compliance officers, lawyers, risk professionals and board-level decision-makers in financial services.
It covers regulatory research across more than 30 jurisdictions, including the US, UK, UAE, Singapore and Hong Kong, and offers document intelligence, gap assessments, policy benchmarking, and sanctions screening across 320+ data sources.
The shift in expectations is not temporary. The FCA has been explicit about its expectations of non-executive directors, and the MAS has signalled similar intent. “We relied on management” is no longer a defence, regulators increasingly treat it as an admission.
Bhaskar Dasgupta, Non-Executive Director and Strategic Advisor of Sherlocq, said, “Boards are not failing on compliance because they lack expertise. They are failing because they have no independent means of verifying the regulatory picture management presents to them.
“The information that would let a director ask sharper questions has always sat behind expensive specialist advice, or not been accessible at all. That has to change. In an environment where regulators are naming individual directors in enforcement decisions and personal fines are no longer theoretical, passive receipt of a management summary is no longer governance. It is exposure.”
Bhavin Shah, founder and CEO of Sherlocq, added, “The biggest governance failures rarely begin with fraud. They begin with a board that trusts the compliance reports it receives without independently verifying whether they reflect the full regulatory picture. Regulators across the UAE, the UK, Singapore, and other leading financial centres are making it clear that passive oversight is no longer enough.
“Sherlocq gives board directors something they have never had before: the ability to independently verify the regulatory landscape, assess documents against applicable standards, and run sanctions checks without relying solely on management or expensive external legal advice.”
Read the full Sherlocq post here.
By Daniel Willis, Editor of RegTech Analyst
Copyright © 2026 FinTech Global
