Healthcare Facility Licensing in UAE Federal: Complete Guide
A group operating in Abu Dhabi and Dubai runs two sets of licences against two sets of standards.
No single licence lets you open a clinic anywhere in the UAE. This guide identifies which regulator licenses facilities where — the Ministry of Health and Prevention, the Department of Health – Abu Dhabi, the Dubai Health Authority, and the separate regulator inside Dubai Healthcare City — and then sets out what the federal layer above them actually governs: registration and import of medicines and devices, controlled medicines, advertising of medical services, the medical liability committees, and limits on where health data may be stored. It also explains why the facility licence and the professional licence are separate approvals, and why neither travels across an emirate border.
There is no single licence that lets you open a clinic anywhere in the United Arab Emirates. Health facility licensing is done at emirate level, by different regulators applying their own standards, while a set of genuinely federal rules sits above them covering medicines, devices, professional conduct and liability for clinical error. Understanding which of your obligations are federal and which belong to the emirate you are opening in is the first useful step, because groups that assume a national system spend months discovering otherwise.
Which body licenses the facility
- The Ministry of Health and Prevention licenses health facilities in the emirates that do not operate their own health regulator, which in practice means Sharjah, Ajman, Umm Al Quwain, Ras Al Khaimah and Fujairah.
- The Department of Health – Abu Dhabi licenses facilities and professionals in the Emirate of Abu Dhabi, including Al Ain and Al Dhafra.
- The Dubai Health Authority licenses facilities and professionals in Dubai.
- The regulator of Dubai Healthcare City licenses facilities inside that free zone under its own rules, which is why a Dubai clinic can hold a licence from one of two different bodies depending on where its door is.
The financial free zones are not part of this picture. The DIFC and ADGM are common-law jurisdictions with their own courts and financial regulators, the DFSA and the FSRA respectively, but they are not health regulators, and a company registered there does not thereby acquire the right to provide clinical services.
The practical effect is that a licence issued in one emirate has no force in another. A group operating in Abu Dhabi and Dubai holds two sets of facility licences, two sets of professional licences for staff who work across sites, and complies with two sets of standards that overlap heavily but not completely.
What the federal layer actually governs
Several things do not vary by emirate, and these are the ones most often overlooked by investors focused on the facility licence itself.
Medicines and medical devices. Registration of pharmaceutical products and medical devices, and permission to import them, is handled federally through the Ministry of Health and Prevention. A licensed clinic cannot bring in an unregistered product because it is clinically useful; the product itself has to have been through registration, and the importer has to be authorised to import it. Controlled and semi-controlled medicines carry stricter handling, storage and record-keeping obligations, and these are among the most commonly enforced rules in the sector.
Advertising of medical services. Claims made about treatments, before-and-after imagery and promotional pricing are regulated, and prior approval is typically required for medical advertising. Aesthetic and dental clinics generate a disproportionate share of enforcement action here.
Liability for clinical error. The federal medical liability regime routes allegations of medical error through specialist medical liability committees, which assess whether an error occurred and how serious it was, with a higher committee available on review. That assessment materially shapes what follows, whether the matter proceeds as a civil claim for compensation, a disciplinary matter against the practitioner, or something more serious. It is why the response to a complaint in its first weeks matters so much, and why the medical records made at the time carry more weight than any account given later.
Health data. Health information is subject to federal restrictions on where it may be stored and processed, including limits on transferring patient data outside the UAE, alongside the general data protection regime in Federal Decree-Law No. 45 of 2021. The DIFC and ADGM operate their own data protection laws. For a clinic this is not an abstract point: it determines whether an overseas cloud-based practice management system may lawfully be used at all, and that question should be settled before the system is bought.
The facility licence and the professional licence are separate
Licensing the premises does not license the people in it. Every physician, dentist, nurse, technician and allied professional needs an individual licence from the regulator of that emirate, granted against qualification, experience and assessment requirements for the specific title and scope claimed. A practitioner may only provide the services their licence covers, and a facility may only offer the services listed on its own licence.
Two consequences follow. First, the facility's service list and its clinical staffing have to match: a licence that names a specialty with no correspondingly licensed practitioner is a finding waiting to happen at inspection. Second, a practitioner licensed in one emirate is not licensed in the next, so cross-site rotas in multi-emirate groups need to be built around who actually holds which licence.
What the application has to demonstrate
Regulators differ in detail but the file is broadly consistent. Expect to establish the corporate entity and its economic licence; a site that meets the layout, area, ventilation, infection control and equipment standards for the category of facility applied for; a named medical director with appropriate credentials; the scope of services requested; policies for infection control, medical records, waste, radiation where relevant and patient consent; and evidence of professional indemnity insurance. Facilities that will operate a pharmacy, a laboratory or imaging services need those approved as their own components rather than assumed within the general licence.
Inspection is part of the process, not a formality at the end of it. The site is examined before the licence issues and again periodically afterwards, and a fit-out completed without reference to the applicable standards frequently has to be rebuilt.
After the licence: what needs approval
The licence describes a specific facility doing specific things at a specific address. Changes to any of that generally need the regulator's agreement in advance: adding a specialty or a service, changing the medical director, changing the premises or their layout, changing ownership or the licensed manager, or opening a branch. Groups undertaking a corporate transaction should check what regulatory consent the change of control requires, because a share transfer that closes before the health regulator has approved it is a problem that surfaces at the next renewal.
Insurance, claims and complaints
Professional indemnity cover for the facility and its practitioners is a licensing condition, and the scope of that cover should be checked against the services actually provided rather than the services described when the policy was first taken out. Where an emirate operates mandatory health insurance, the facility also has to be set up to work with the insurers and the claims and coding systems used there, and billing and coding practice is itself audited.
When a patient complains, the route usually starts with the health regulator rather than the courts, and the clinical record, the consent documentation and the incident report drive the outcome. Facilities that treat consent as a signature exercise rather than a documented conversation are consistently in the weakest position. Our medical malpractice defence team works with facilities from the point a complaint is received, and the early response is where most of the value is added.
For groups planning more than one site
Map the regulator for each location before committing to leases; keep a single register of which practitioner holds which licence in which emirate; build data storage decisions around the health data rules rather than around convenience; and treat every change to service scope as a regulatory step rather than an operational one. The federal rules give a common floor. The licence, the inspection and the renewal are local, every time.
For advice on facility licensing, a regulatory investigation or a patient complaint, contact the Nour Attorneys team.
Disclaimer: The information provided in this article is for general informational purposes only and does not constitute legal advice. Readers should seek professional legal advice tailored to their specific circumstances before making any decisions or taking any action based on the content of this article.
Nour Attorneys Team
Related Resources
- Responding to a medical liability complaint in the UAE
- Patient consent and medical records
- Health data storage and transfer restrictions
- Change of control in licensed healthcare businesses