Who is in scope
Providers licensed federally, including in Sharjah and the Northern Emirates, and every health-data handler nationwide under the federal ICT-in-health law.
Products
Assess
Comply
Protect
Free Tools
Email Breach Checker
Cyber Hygiene Test
Regulator directory
Regulatory calendar
ADHICS
ADGM
CBUAE
CSC
DFSA
DHA
DHCC
DIFC
DOH
FSRA
NIAF
Malaffi
MOHAP
NABIDH
NCAP
SCA
VARA
Healthcare
Finance
AI & Machine Learning
Defence & Military
Government Contractor
Professional Services
Technology & SaaS
Retail & Hospitality
Real Estate & Construction
Architecture, Design & Construction
Cybersecurity in Dubai
Cybersecurity in Abu Dhabi
Cybersecurity in Sharjah
All emirates
Chambers of Commerce
MSP
Partner Program
About Us
Why AccuSights
Compliance Center
Blog
Threat Dashboard
Threat Headlines
Contact
MoHAP
Ministry of Health and Prevention
Federal health ministry; licenses providers in Sharjah and the Northern Emirates and runs the Riayati health information platform.
Last verified: September 2026Official site
Notification window
As federal licensing and the ICT-in-health law prescribe; PDPL breach duties apply in parallel.
Current instrument
Federal Law 2 of 2019 on the use of ICT in health fields (data stays in the UAE unless permitted); Riayati platform; federal licensing standards. Sharjah facilities also answer to the Sharjah Health Authority for licensing and inspection.
The duties, in plain language
- Store and process health data inside the UAE.
- Integrate with Riayati securely where required.
- Meet emirate licensing conditions in Sharjah and the Northern Emirates.
Frameworks that satisfy it
Questions we get
A hospital group with sites in Abu Dhabi, Dubai and Sharjah: how many rulebooks?
At least four: ADHICS in Abu Dhabi, the DHA set in Dubai, federal licensing plus the Sharjah Health Authority in Sharjah, and Federal Law 2 of 2019 and the PDPL everywhere. Hundreds of line items across them. Our experts build the group one custom critical-control framework that answers all of them, and the platform’s telemetry keeps every control proven and continuously compliant.
Summary for orientation, with attribution to the regulator, last checked September 2026. The regulator's own publications govern; consult them and your advisers for decisions. Where this page and the instrument differ, follow the instrument and tell us, so we can fix it.
A note on authority: the regulator, auditor or certifying body has the final say on whether you comply. Much regulator language is still being clarified, and we say so rather than guess. We help interpret the requirements, scope what applies to you, gap-assess against what is published today, and keep you compliance-ready and secure as the guidance evolves. We hold no regulatory authority and do not certify; where a regulator has its own process, that process governs.
Book a demo
See your obligations as one program.
Tell us your sector and we will show you which UAE regulations apply to you, where the gaps are, and how one control set covers them all.