Who is in scope
Every licensed healthcare facility, payer and health-data processor in Abu Dhabi, from single clinics to hospital groups.
Products
Assess
Comply
Protect
Free Tools
Email Breach Checker
Cyber Hygiene Test
Regulator directory
Regulatory calendar
ADHICS
ADGM
CBUAE
CSC
DFSA
DHA
DHCC
DIFC
DOH
FSRA
NIAF
Malaffi
MOHAP
NABIDH
NCAP
SCA
VARA
Healthcare
Finance
AI & Machine Learning
Defence & Military
Government Contractor
Professional Services
Technology & SaaS
Retail & Hospitality
Real Estate & Construction
Architecture, Design & Construction
Cybersecurity in Dubai
Cybersecurity in Abu Dhabi
Cybersecurity in Sharjah
All emirates
Chambers of Commerce
MSP
Partner Program
About Us
Why AccuSights
Compliance Center
Blog
Threat Dashboard
Threat Headlines
Contact
DoH
Department of Health, Abu Dhabi
Licenses Abu Dhabi healthcare and mandates ADHICS, the emirate’s healthcare information and cyber security standard, with Malaffi HIE participation.
Last verified: September 2026Official site
Notification window
Incident reporting to the Department as the standard prescribes; hospitals with 21 or more beds and payers meet all three tiers.
Current instrument
Abu Dhabi Healthcare Information and Cyber Security Standard (ADHICS): 692 controls (162 primary, 530 secondary) across 11 domains, applied in Basic, Transitional and Advanced tiers by entity type; Malaffi health information exchange participation.
The duties, in plain language
- Operate the ADHICS controls for your tier and evidence them at licence renewal.
- Keep patient data inside the UAE unless a health authority decree permits otherwise (Federal Law 2 of 2019).
- Connect to Malaffi securely and govern who accesses what.
Frameworks that satisfy it
Questions we get
Which ADHICS tier applies to a clinic?
Smaller facilities generally meet the Basic tier; hospitals with 21 or more beds and payers meet Basic, Transitional and Advanced. The Department’s FAQ sets the mapping; we confirm yours in the scoping call.
We also have a Dubai branch. Do we run ADHICS there?
Dubai facilities answer to the Dubai Health Authority and its own standards. The two rulebooks overlap heavily in substance, which is why one mapped control set serves both sites with evidence collected once.
Summary for orientation, with attribution to the regulator, last checked September 2026. The regulator's own publications govern; consult them and your advisers for decisions. Where this page and the instrument differ, follow the instrument and tell us, so we can fix it.
A note on authority: the regulator, auditor or certifying body has the final say on whether you comply. Much regulator language is still being clarified, and we say so rather than guess. We help interpret the requirements, scope what applies to you, gap-assess against what is published today, and keep you compliance-ready and secure as the guidance evolves. We hold no regulatory authority and do not certify; where a regulator has its own process, that process governs.
Book a demo
See your obligations as one program.
Tell us your sector and we will show you which UAE regulations apply to you, where the gaps are, and how one control set covers them all.