Healthcare & Life Sciences in United Arab Emirates: independent market-entry study

• The UAE health market has a federal product layer and emirate-level provider layers. Emirates Drug Establishment governs the cited federal medical-device marketing-authorisation and pharmaceutical-entity routes; DHA licenses Dubai facilities and professionals; DoH governs Abu Dhabi facilities, health-information controls and payer rules. A product registration, facility licence or professional privilege proves only its own gate.
• Dubai’s 2024 register counted 5,372 licensed health facilities and 66,070 licensed professionals, while Riayati reports 4,952 connected facilities nationally. These datasets have different perimeters and are not combined into an addressable-customer total. Facility count, connected-record scale and clinician count do not establish budget, clinical need or procurement access.
• A market-entry plan must classify every feature and role: manufacturer, marketing-authorisation holder, importer, warehouse, distributor, licensed facility, healthcare professional, software supplier, processor, payer or third-party administrator. One company may occupy several roles, but the evidence and accountable local entity must be recorded for each.
• MOHAP’s 2024 national indicators report 34,912 doctors, 67,931 nurses and 18,685 inpatient beds. These figures describe workforce and capacity at national level; they do not identify vacancy, utilisation, specialty shortage, facility budget or buyer access. Use the underlying emirate and facility data before converting capacity into a commercial thesis.

• Dubai: Sheryan separates the initial inactive facility licence from activation. The operator must complete the trade-licence and engineering path, activate professionals, appoint the medical director where required, implement an eligible electronic medical record, satisfy NABIDH requirements and pass the final inspection before the facility becomes active.
• Abu Dhabi: DoH’s facility-licensure standard requires a licensed facility, appropriately licensed and privileged staff, facility and professional medical-liability insurance, facility-design compliance, reporting and quality controls, occupational safety, AAMEN/ADHICS compliance and the applicable Tawteen requirement. The exact category and service standard must be verified for the proposed model.
• Northern Emirates and federal provider routes: identify the local licensing authority, Emirates Health Services or other buyer, facility type, professional route, product authority and federal procurement path. A Dubai or Abu Dhabi licence, integration status or inspection does not automatically authorise operation elsewhere.
• Free-zone or specialist clusters: an economic or free-zone licence does not displace clinical, product, professional, data, radiation, laboratory, advertising or payer rules where the activity falls within them. Record the zone authority and the competent health regulator separately.

• EDE’s medical-device route states 45 working days, an AED 100 application fee, AED 5,000 registration fee and a five-year certificate from committee approval. The applicant must be an EDE-licensed medical warehouse or marketing office; the marketing-authorisation holder and manufacturing site must be registered before product submission.
• The device file can require a factory certificate, certified free-sale evidence, agency agreement, class-appropriate conformity or marketing authorisation, post-market monitoring, product information, laboratory material, a sample, declaration of conformity, safety and efficacy evidence for Classes III and IV and special evidence for animal-derived material. The exact file depends on product and classification.
• EDE’s medical-warehouse route is phased and publishes three working days per phase for a complete file, not an end-to-end opening promise. The route includes owner approval, primary inspection, initial approval, other-authority steps, responsible-pharmacist or equipment-engineer arrangements, final inspection and licence issuance.
• DoH’s January 2026 Malaffi circular requires healthcare facilities to submit a plan within one month and connect and successfully transmit the applicable minimum data sets within six months. Failure may affect licence renewal. The applicable datasets must be confirmed with Abu Dhabi Health Data Services for the facility type.
• DHA’s current NABIDH onboarding route begins with facility readiness assessment, followed by a developer account, specification review, HL7 validation and an onboarding request. Connection is controlled provider infrastructure; it is not an open health-data API or permission to reuse patient records.
• DHA’s facility-fee schedule is category-specific: the activation page displays different licence and inspection bands rather than one universal charge. Horizon therefore records the selected facility category, term, inspection and re-inspection line from the current schedule and does not publish a single Dubai clinic-opening price.
• DoH describes ADHICS as applicable to healthcare-entity systems and applications as well as partner and third-party systems used within the Abu Dhabi ecosystem. A technology supplier should expect its access, hosting, support and subprocessors to enter the facility’s assurance scope; a generic ISO certificate does not by itself prove workload acceptance.
• DoH reported 4,540 facility-licensing audit rounds during 2025 and 3,485 compliance audits, up from 2,401 in the prior comparison, including full stated coverage of home-healthcare providers. This demonstrates active supervision, not approval of an individual supplier: a counterparty file should retain the exact facility licence, audit or enforcement status, service category and current remediation obligations.
• MOHAP’s open-data catalogue includes a 2026 geocoded health-facility dataset and a 2024 licensed-facility dataset. Use the catalogue to identify and validate facilities, geography and authority coverage; do not infer ownership, service capacity, procurement need or contact permission from a row in an official dataset.

• Clinical service and medical director: owns intended clinical use, pathway fit, professional privileges, patient safety and clinical acceptance. Enthusiasm from an innovation team does not replace this accountability.
• Biomedical engineering, laboratory or pharmacy owner: controls technical specifications, installation, calibration, validation, consumables, maintenance, training, vigilance and continuity for the relevant product category.
• CIO, health-information and cyber owners: control EMR integration, NABIDH, Malaffi or Riayati interfaces, identity, terminology, data quality, access, logging, hosting, resilience, breach response and supplier assurance.
• Procurement and supply-chain owner: controls vendor registration, tender or catalogue route, bid evaluation, purchase order, delivery acceptance, inventory and payment. For federal entities, the Ministry of Finance Digital Procurement Platform is a distinct route from emirate or provider procurement.
• Payer, coding and revenue-cycle owner: tests benefit coverage, prior authorisation, tariff, coding, claim format, adjudication and denial economics. Clinical adoption does not prove reimbursability or a sustainable provider margin.

• Federal buyer route: register in the Federal Supplier Register and complete qualification on the Digital Procurement Platform. The service is free, accepts listed domestic, free-zone and foreign supplier categories and publishes a maximum 30-working-day qualification review. Registration enables tender participation; it is not a healthcare licence, product registration, tender invitation or award.
• Provider tender route: preserve the named legal buyer, vendor category, tender or request identifier, specification, clinical and technical evaluation, demonstration protocol, commercial bid, award evidence, purchase order, delivery acceptance and payment status. A public strategy, facility count or supplier account is not an opportunity without a current procurement object.
• Medical-device route: settle the EDE marketing-authorisation holder, applicant and manufacturing-site prerequisites before treating the product application as ready. Keep authority fees separate from agent, warehouse, translation, conformity, sample, laboratory, insurance, vigilance, logistics and commercial-launch costs.
• Dubai digital-health route: confirm that the facility’s EMR and supplier architecture meet the applicable NABIDH policies and the effective interoperability version. Complete readiness, developer access, message mapping and validation before proposing a production date; an inactive facility licence does not authorise operation.
• Abu Dhabi reimbursement route: use the current Shafafiya tariff, claims and adjudication materials for the service and date. A listed price, code or relative weight does not guarantee coverage, authorisation, volume, payment or provider margin; model denials, documentation, coding and collection time.
• Foreign-supplier route: the Ministry of Finance service lists foreign suppliers among eligible categories and requests the applicable trade licence, tax-registration evidence and owner passport copy. This can open the federal procurement workflow, but product marketing authorisation, local accountable roles, customs, provider qualification and tender-specific eligibility remain separate.

• For each medical device retain the product class, intended use, variants, manufacturer, manufacturing-site registration, marketing-authorisation holder, applicant licence, free-sale evidence, agency agreement, conformity basis, committee approval, certificate term and post-market owner. A foreign approval informs the file but is not UAE marketing authorisation.
• For a medical warehouse retain the permitted activity, municipality-approved layout, commercial licence, Civil Defence certificate, responsible pharmacist or equipment engineer, inspection results and final EDE licence. Three working days per phase applies to the authority’s stated complete-file phase and must not be sold as total establishment time.
• For a Dubai facility retain the inactive licence, valid trade licence, professional activations, medical director, EMR/NABIDH readiness, inspection result and active facility licence. DHA’s stated one-working-day activation processing does not include readiness, scheduling, remedial work or re-inspection.
• For Abu Dhabi retain the facility category, DoH licence, professional licences and privileges, insurance, design compliance, AAMEN/ADHICS evidence, Malaffi data-transmission status and category-specific standard. The 2026 minimum-data-set circular creates a timed compliance duty; it does not grant data access to a vendor.
• For patient data document controller, processor and subprocessor roles, purpose, lawful basis, minimum necessary data, consent where applicable, access, hosting, transfers, retention, deletion, data-subject handling, audit, incidents and secondary use. Connection to Riayati, NABIDH or Malaffi is not consent or a commercial data licence.
• Read the effective NABIDH interoperability standard together with the linked Dubai health-information policies on sharing, asset management, quality, classification, confidentiality, consent, access control, incidents, secondary use, audit and identity. Passing message validation does not close the wider governance and clinical-safety file.

• For a medical device, select one intended use and provider department, complete the class and EDE route map, identify the eligible local applicant and distributor, build the evidence and post-market file, and validate installation, training, maintenance and consumable economics with the clinical and biomedical owners before forecasting orders.
• For a Dubai clinical-software deployment, choose one licensed facility and workflow, measure baseline cases, time, errors and escalation, complete NABIDH readiness and message mapping, agree bilingual usability, security and clinical validation, and obtain the named production budget and procurement route.
• For an Abu Dhabi health-information product, map the applicable 2026 Malaffi minimum data set, coding, identifiers and units, complete the ADHICS/AAMEN supplier evidence and agree who owns remediation, monitoring and incident handling. Price only after the facility and DoH-facing integration owners confirm scope.
• For a provider service, test demand by referral source, eligible patient cohort, professional capacity, room or equipment constraint, payer mix, tariff and authorisation, denial rate, clinical outcome and contribution margin. A licence category or population figure alone is not a bankable volume case.
• For federal public procurement, complete supplier qualification, monitor a named open tender or catalogue requirement and connect the product registration and clinical evidence to that specification. Keep qualification, bid, award, purchase order, acceptance and paid invoice as separate pipeline stages.

• Treating a CE mark, FDA route, EDE product certificate, warehouse licence, distributor agreement and hospital vendor approval as interchangeable. Each controls a different role and none proves reimbursement or purchase.
• Using the 45-working-day product target, three-working-day warehouse phases, five-day inactive-facility target or one-day activation step as an end-to-end market-entry timetable. Complete-file, inspection, third-party, remediation and scheduling time remains outside those narrow measures.
• Assuming Riayati’s 14 million patients or billions of records are an available dataset, lead list or addressable user base. Connected infrastructure creates governance and interoperability obligations, not vendor access or reuse rights.
• Running a clinically appealing pilot without intended-use classification, representative evaluation, professional accountability, payer economics, production integration, cyber review, procurement path and post-market support. Pilot success can still fail to produce a safe funded deployment.
• Using a tariff or claim code as proof of payment. Coverage, authorisation, documentation, coding, adjudication, denials, resubmission, collection time and contract terms determine realised revenue.

• Which authority governs each product, facility, professional, data, advertisement, payer and procurement role, and what current official record proves completion of each required gate?
• Who is the local accountable entity for marketing authorisation, import, warehousing, distribution, clinical use, installation, training, vigilance, recall, maintenance, cybersecurity and continuity?
• Which named provider, department, pathway and patient cohort own the need, and which budget or payer route funds production after the pilot?
• What NABIDH, Malaffi or Riayati data, message, coding, security, consent, hosting, access, audit and incident requirements apply to the exact facility and workflow?
• Does the downside case remain viable after licensing, evidence, agent and warehouse, integration, professional, consumable, maintenance, insurance, denial, collection, recall, cyber and local-support costs?

• The first choice is not simply mainland or free zone. It is the emirate, licensed activity, customer location, contracting rights and regulatory perimeter that best fit the operating model. Federal rules, emirate-level licensing and free-zone requirements must be read together. For Healthcare & Life Sciences, the route is not cleared until the competent authority confirms facility, professional, product, clinical, distribution and health-data approvals across the intended care or life-science pathway.
• Healthcare & Life Sciences establishment route to test: Mainland company licensed by the relevant emirate economic authority. Record the exact activity that covers the proposed offer, the ownership conditions, issuing authority, output and evidence expiry date; a neighbouring activity code is not a substitute.
• Healthcare & Life Sciences operating sequence: Identify the precise activity and the emirate or specialist jurisdiction. Select the legal form, reserve the trade name and obtain initial approval. Treat facility, professional, product, clinical, distribution and health-data approvals across the intended care or life-science pathway as a separate operating gate, together with any municipal, standards and buyer registration still required after commercial registration.

• Healthcare & Life Sciences tax perimeter: The official UAE portal states corporate-tax rates of 0% on taxable income up to AED 375,000 and 9% above that threshold, subject to the law, exemptions and special rules. Model registration, filing, invoicing, withholding and any customs or transaction treatment against the intended entity and revenue flow; recheck every free-zone or incentive assumption before relying on it.
• Healthcare & Life Sciences people and work authorisation: The entity must establish the applicable immigration, establishment-card and employment files. A mainland employer first needs a valid economic licence and the required establishment records before requesting a Ministry of Human Resources and Emiratisation work permit. Map immigration, labour, professional licensing and any controlled-site access to the actual roles the operating model requires.
• Healthcare & Life Sciences continuing compliance: Licence type follows the economic activity and may be commercial, industrial, professional or another regulated category. Maintain the accounting, beneficial-ownership, renewal, payroll and sector evidence needed for facility, professional, product, clinical, distribution and health-data approvals across the intended care or life-science pathway; verify the live authority service before filing, signing or paying.

• Establishment and market-entry controls: Choose the activity, emirate and legal jurisdiction (Relevant emirate economic department or free-zone authority); Reserve the name, obtain approvals and issue the economic licence (Emirate economic department, TAMM for Abu Dhabi, or the selected free zone). Use the cited official routes below and retain the dated output; an authority listing is not evidence that Healthcare & Life Sciences permission has been granted.
• Operating and people controls: Register for Corporate Tax and VAT and establish records (Federal Tax Authority (FTA)); Open establishment and immigration files and obtain work permits (MOHRE and ICP, or the competent free-zone authority; GDRFA where applicable in Dubai). Use the cited official routes below and retain the dated output; an authority listing is not evidence that Healthcare & Life Sciences permission has been granted.
• Continuing and transaction controls: Complete sector, product, customs, banking and continuing compliance (Competent federal, emirate and sector authorities). Use the cited official routes below and retain the dated output; an authority listing is not evidence that Healthcare & Life Sciences permission has been granted.
• Verification control: before commitment, open the current United Arab Emirates authority service, confirm that the named output still applies to the exact Healthcare & Life Sciences activity and record any sector approval, product registration or buyer qualification that remains unresolved.

• Licensed Dubai health facilities: 5,372. Reference and status: 2024 · DHA
• Licensed Dubai health workforce: 66,070. Reference and status: 2024 · DHA
• Unique patients connected: 14m. Reference and status: National unified medical record · MoHAP
• Connected medical records: 4.00bn. Reference and status: Riayati platform indicator · MoHAP

• Dubai Health Statistical Yearbook 2024 — 2024 data / published 2025. Evidence role retained in this dossier: Facility and workforce evidence
• MoHAP: National Unified Medical Record — Updated Oct 2024 / reviewed 12 Oct 2026. Evidence role retained in this dossier: National health-information infrastructure and platform-scale evidence
• MOHAP: National health indicators — 2024 indicators / reviewed 19 Oct 2026. Evidence role retained in this dossier: Official national doctor, nurse and inpatient-bed indicators; used only at their published perimeter
• MOHAP: Open health-data catalogue — Current catalogue / reviewed 19 Oct 2026. Evidence role retained in this dossier: Official geocoded-facility and licensed-facility data routes; no inferred demand or contact rights
• DoH Abu Dhabi: 2025 licensing and compliance audit activity — 13 Apr 2026 / reviewed 19 Oct 2026. Evidence role retained in this dossier: Official supervisory-activity evidence and stated home-healthcare audit coverage

Market structure

• Federal product, emirate provider, care-delivery, payer and health-information layers have different accountable entities and approval routes.
• Riayati, NABIDH and Malaffi are controlled health-information environments, not open commercial datasets.
• EDE medical-product authorisation, federal supplier registration and the procurement systems of Dubai and Abu Dhabi health providers are separate gates; product approval does not create a tender, provider listing or reimbursement decision.
• The production buyer chain normally includes the clinical sponsor, facility licensing owner, biomedical or pharmacy function, health-information and cybersecurity owners, finance or payer reviewer, tender authority and final acceptance owner; a pilot without that chain has no evidenced scale route.

Opportunity lenses

• Named clinical workflows with measurable outcome, production owner and funded route.
• Devices with eligible EDE, distribution, installation, training and post-market routes.
• NABIDH or Malaffi integration tied to current specifications and a licensed provider.

Risks and evidence gaps

• Product, facility, professional, data, procurement and payer approvals are not interchangeable.
• An inactive licence, connected record or clinical pilot does not authorise operation, data reuse or payment.
• Federal product authorisation can be misrepresented as emirate facility approval, health-information onboarding, payer acceptance or access to an active procurement opportunity.

Questions before commitment

• Which authority and accountable entity govern every product, facility, professional and data role?
• Which provider, payer and procurement owner funds production?
• What converts the pilot into a safe, compliant and funded deployment?