Healthcare Facility Licensing in DMCC: Complete Guide
Picking the wider activity to keep options open brings its own approvals, premises rules and inspections.
DMCC issues the company licence, approves the activity, allocates the unit and sponsors the visas; the Dubai Health Authority licenses the facility and every clinician working in it. This guide gives the sequence that works — DHA initial approval on the activity and medical director, then the DMCC licence and lease, then layout approval, fit-out and final inspection — and shows how the DMCC activity list separates clinical services from healthcare consultancy, trading in medical supplies and telemedicine. It also covers why a flexi-desk cannot support a clinic, and what applies to patient data, advertising approval and medical liability cover.
What DMCC licenses, and what it does not
DMCC issues the company licence, approves the activities on it, allocates the office unit and sponsors the visas. It does not license clinical practice. A clinic, dental practice, physiotherapy centre or diagnostic service operating from a DMCC address is licensed as a health facility by the Dubai Health Authority (DHA), and every clinician in it holds a personal DHA licence.
In practice the two run in parallel: DMCC treats clinical activities as requiring external sign-off and will look for the health authority's approval before finalising the licence, while the health authority will not inspect an address the applicant does not yet hold. The workable sequence is initial approval from the DHA on the activity and the proposed medical director, then the DMCC licence and lease, then layout approval, fit-out and final inspection.
Pick the activity precisely
The DMCC activity list separates things that sound similar and are regulated very differently:
- Clinical services — treating patients on the premises. Requires a DHA facility licence and licensed practitioners.
- Healthcare management or consultancy — advisory, administration, billing support or facility management for clinical operators. Does not permit any clinical contact, and a consultancy licence used to see patients is an unlicensed practice problem, not a paperwork one.
- Trading in medical supplies, devices or pharmaceuticals — brings Ministry of Health and Prevention product registration and import requirements, and needs storage the licence and premises actually support.
- Digital health and telemedicine — remote consultation still involves licensed practitioners and a licensed facility standing behind them, plus a clear position on where patient data is stored.
Choosing the wider category "to keep options open" is not free. Each activity carries its own approvals, premises requirements and inspection exposure.
Premises: the flexi-desk trap
A flexi-desk or shared workspace is enough to register a consultancy and obtain visas. It is not enough for a facility that treats patients. Clinical operations need a physical unit that can be fitted out to the health authority's specification — treatment room dimensions, patient flow, sterilisation area, waste holding, hand-hygiene points and accessibility.
Fit-out drawings go to DMCC for approval and to Civil Defence, and the same drawings have to satisfy the health regulator. Building first and seeking approval afterwards is the most common reason a DMCC clinic misses its opening date, because corrections to a fitted unit in a tower are slow and expensive. Clinical waste requires a contract with an approved contractor and a manifest trail that inspectors can follow.
People
Employees are sponsored by the DMCC entity, and the visa quota is tied to the size and type of unit held. Clinical staff need DHA professional licences linked to the licensed facility; a practitioner cannot lawfully see patients at an address not recorded on their licence. The medical director is nominated as part of the facility application and must be licensed in a field that supports the scope of services the facility is applying for — a mismatch here holds up the whole file.
Patient data
DMCC is not a common-law financial centre. The DIFC and ADGM operate their own data protection regimes; a DMCC company does not. Patient and employee information is handled under Federal Decree-Law No. 45 of 2021, and the obligations bite hardest on the arrangements clinics treat as routine: a practice management system hosted abroad, imaging sent to a third party for reporting, results delivered through a messaging application, and marketing built on a patient list. Each needs a lawful basis, a written arrangement with the provider handling the data, and a record of what leaves the clinic. Consent to treatment is not consent to marketing.
Medical records must be retained and retrievable for the period the health authority specifies, which needs to survive a change of software vendor or the departure of the clinician who created them.
Advertising, insurance and claims
Health advertising requires prior approval before it is published, and that includes social media posts, before-and-after images, outcome claims and influencer arrangements. Facilities and practitioners must hold medical liability insurance, and the cover should track the actual scope of practice rather than the scope at the date the policy was written — a clinic that adds an aesthetic or surgical service without telling its insurer may find the cover does not reach the new activity.
Where a patient complains, the matter is examined by a medical liability committee formed under the health authority, and its findings weigh heavily in any court claim that follows. What the committee reads is the clinical record: notes, consent specific to the procedure performed, referral and follow-up. Clinics that involve counsel at the committee stage rather than after a determination are in a considerably better position in medical liability disputes.
Tax and the money side
A DMCC entity is within the scope of Federal Decree-Law No. 47 of 2022 on corporate tax, which applies to financial years starting on or after 1 June 2023 — 0% on taxable income up to AED 375,000 and 9% above. VAT applies at 5% under Federal Decree-Law No. 8 of 2017 as amended by Federal Decree-Law No. 18 of 2022, and healthcare supplies do not all carry the same treatment, so the mix of services and any retail or aesthetic offering should be reviewed before invoicing starts.
Renewals and inspections
Three cycles run independently: the DMCC company licence, the DHA facility licence and each practitioner's personal licence. A lapse in one can block the others — an expired facility licence stops clinical work even where the company licence is current, and an expired company licence can stall visa and immigration transactions for the staff the facility depends on. One owner, one calendar, one file.
Before you sign the lease
- Confirm the scope of services and the medical director first; everything else follows from them.
- Check the unit can physically accommodate the required rooms, waste route and services.
- Get layout approval before fit-out, not after.
- Match the visa quota to the planned clinical roster.
- Settle where patient data will be stored before choosing the software.
For advice on a DMCC healthcare setup, an activity or scope variation, practitioner licensing or a patient complaint, contact the Nour Attorneys team.
Disclaimer: The information provided in this article is for general informational purposes only and does not constitute legal advice. Readers should seek professional legal advice tailored to their specific circumstances before making any decisions or taking any action based on the content of this article.
Nour Attorneys Team
Related Resources
Explore more of our insights on related topics:
- Healthcare Facility Licensing Requirements in the UAE
- Medical Malpractice Defense Strategies for Dubai Clinics
- Pharmaceutical Compliance Guidelines for UAE Distributors
- Patient Privacy Regulations for Multinational Entities
