Saudi Arabia's VAT system has spent 2026 maturing on four fronts at once: its years-long e-invoicing rollout is reaching the smallest businesses in the country, the regional VAT treaty underlying the entire Gulf has just been amended for the first time in a decade, digital platforms picked up direct VAT liability they didn't have before, and a coordinated GCC-wide sugar tax replaced the old flat-rate model. None of these started this year, but several of them are landing right now.
E-invoicing reaches its final wave
ZATCA's Fatoora e-invoicing program has been expanding in successive waves since Phase 2 enforcement began in January 2023, each wave capturing a lower revenue threshold than the last — starting at businesses above SAR 3 billion and working downward. Wave 24, announced in September 2025 and due by 30 June 2026, drops the threshold to SAR 375,000 — Saudi Arabia's basic mandatory VAT registration threshold itself. For the first time, the mandate reaches the smallest VAT-registered businesses in the country, bringing thousands of SMEs into real-time clearance for the first time. By ZATCA's own figures, the system processed 8.2 billion e-invoices in 2025, a 64% increase on the year before — a scale that gives some sense of how embedded Fatoora has already become before this wave even lands.
Tellingly, ZATCA's separate penalty-waiver initiative — which has let businesses correct past compliance errors without fines — was also extended to expire on exactly 30 June 2026, the same date as the Wave 24 deadline. The grace period and the final wave end together: businesses get until the last possible moment to fix old problems, and then the safety net disappears as the rollout reaches its intended finish line.
A new GCC-wide VAT framework
Separately, and far more recently — Saudi Arabia's Council of Ministers approved amendments to the GCC Unified VAT Agreement itself in the past few days, the first substantive update to the 2016 regional VAT treaty underlying the entire Gulf Cooperation Council. Other member states are expected to follow with their own local implementation.
The changes touch five articles of the agreement. The most significant: import VAT may now be collected at the first GCC port of entry, with a mechanism to settle that VAT with whichever member state the goods are actually consumed in — addressing years of uncertainty over which country has the right to collect VAT on goods that cross more than one Gulf border before reaching a final customer. The agreement also formally abandons the idea of a single common GCC VAT rate: 5% is now described as a floor, not a fixed rate, openly acknowledging that Saudi Arabia (15%) and Bahrain (10%) have already diverged from the UAE and Oman (both still at 5%). Tax authorities across the bloc also gain expanded access to information on intra-GCC transactions, and the rules for supplies to individuals and non-VAT-registered persons crossing GCC borders have been clarified. For any business moving goods through more than one Gulf country, this is a genuine change to plan around, not just a procedural update — pricing, contracts, and ERP tax codes built around a single regional rate no longer reflect reality, if they ever fully did.
Platforms now carry direct VAT liability
From 1 January 2026, Saudi Arabia expanded its "deemed supplier" rules for electronic marketplaces under Article 47 of the VAT Implementing Regulations. A platform was already treated as the VAT supplier — not merely an intermediary — when facilitating digital services from non-resident sellers. The 2026 expansion adds a second trigger: platforms facilitating goods or services from resident suppliers who aren't VAT-registered at all now carry the same liability. In both cases, the platform — not the underlying seller — becomes responsible for charging VAT, issuing tax invoices, and reporting to ZATCA.
ZATCA's guidance singles out food delivery and short-term accommodation platforms as particularly exposed, given how much control they typically exercise over pricing, customer interaction, and terms. Narrow exceptions remain for platforms that only process payments or only list/advertise without setting terms or controlling the transaction — the deciding factor throughout is how much actual control the platform exercises, not how it brands itself.
A coordinated regional sugar tax
From the same date, 1 January 2026, Saudi Arabia replaced its old flat 50% excise tax on sweetened beverages with a four-tier model based on actual sugar content per 100ml — zero for artificially-sweetened drinks with no added sugar, a low tier under 5g, a middle tier from 5–7.99g, and a top tier from 8g upward, applying to everything from ready-to-drink beverages to powders and concentrates. This wasn't a unilateral Saudi move: it follows a decision by the GCC's Financial and Economic Cooperation Committee to shift the whole region toward a sugar-linked model, with the UAE adopting the same system on the same date. Qatar followed with its own version of the same tiered approach later in the year, effective July 2026 — a clear regional pattern rather than three separate ideas.
Smaller threads
A few other items round out the year without changing the bigger picture. Saudi Arabia finalized the tax and customs framework for its Special Economic Zones, including implementing regulations and bylaws, with a public consultation on economic substance requirements for SEZ entities running into March 2026. Customs tariffs and HS codes were revised in January, with some duties increased. And the routine annual VAT refund deadline for non-resident businesses falls, as usual, on 30 June 2026 — the same date as the Wave 24 e-invoicing deadline, making this a genuinely busy end-of-June for any non-resident business with Saudi exposure.
What it adds up to
The common thread across all four major developments is a Saudi VAT system shifting from rollout to enforcement. The e-invoicing mandate is closing its last gap rather than expanding into new territory: with Wave 24, the only businesses still outside Fatoora are those below Saudi Arabia's own VAT registration threshold — meaning there's effectively nowhere left to roll out to, and the expiring penalty waiver on the same date marks that closure explicitly rather than leaving it ambiguous. The GCC agreement amendments replace years of regional ambiguity with explicit, if more complex, rules — a single assumed rate or a single point of VAT collection across Gulf borders is no longer a safe simplification, now that the treaty itself acknowledges Saudi Arabia, Bahrain, the UAE, and Oman have settled on four different rates. Platform liability and the sugar tax both reflect the same instinct in different domains: wherever VAT exposure was previously diffuse or easy to structure around — through intermediary platforms that called themselves neutral, through a flat tax rate that ignored what was actually being taxed — Saudi Arabia, often in coordination with its neighbors, closed the gap. Each of the four threads, in other words, is the same regulatory motion: turning a system that was still being built into one that's now expected to function as designed.
