Medical Malpractice in ADGM: Complete Guide
Agreeing that commercial disputes go to the ADGM Courts does not move a patient's medical liability complaint out of the federal regime.
An ADGM address settles where your company exists, not where its clinical exposure sits: the Registration Authority is the corporate regulator, the FSRA has nothing to say about care, and the facility and each practitioner are licensed by Abu Dhabi's health authority. Scope of practice, the committee stage that effectively decides a case, consent, records, insurance and data protection follow.
Why an ADGM address does not settle the question
A clinic, day-surgery unit, telemedicine platform or medical office registered in Abu Dhabi Global Market usually starts with the same misunderstanding: that because the entity sits inside a common-law free zone with its own courts, its clinical exposure sits there too. It does not. ADGM is where your company exists. Clinical practice is regulated by the health authority for the Emirate of Abu Dhabi, and liability for the treatment of a patient is governed by the federal medical liability regime that applies across the UAE. Those are two different registries, two different inspectors, and potentially two different forums for a dispute.
This guide sets out who regulates what, which documents decide a malpractice case long before anyone reaches a courtroom, and the points worth settling in writing while the relationship with the patient is still a good one.
Two regulators, two licences
The ADGM Registration Authority is the corporate regulator. It incorporates the entity, records shareholders and directors, keeps the commercial licence current and lists the activities the company is permitted to carry on. The Financial Services Regulatory Authority is ADGM's financial regulator and has nothing to say about clinical care, which is a common source of confusion when a healthcare group reads free zone material written for financial firms.
Clinical authorisation is separate. The health authority licenses the facility and licenses each practitioner individually, by scope of practice. A physician cleared to perform one category of procedure is not cleared for the adjacent one simply because the facility holds a wider permission. Where a service is delivered remotely, or where a practitioner is engaged from another emirate or from overseas on a visiting basis, the licensing position needs to be confirmed for that specific arrangement before the first patient is seen.
The gaps that produce claims
Most enforcement problems are not exotic. They are the same recurring failures:
- A practitioner treating outside their licensed scope, often with the facility's knowledge.
- A service being offered that does not appear on the facility's approved activity list.
- Lapsed practitioner credentials that nobody was tracking centrally.
- Equipment or medicines held without the permission the authority requires for them.
- Marketing claims about outcomes that the approved scope does not support.
Each of these turns an ordinary complaint about a poor result into something worse, because the facility is answering a regulatory breach at the same time as it is defending clinical judgment.
How a medical liability complaint actually proceeds
A patient who is unhappy with treatment does not usually begin with a lawsuit. The complaint goes to the health authority. Where it concerns clinical judgment rather than administration, it is examined by the specialist medical liability committee constituted for that purpose under the federal medical liability framework, which decides whether there was an error, how serious it was, and whether it caused the harm complained of. There is a route of appeal to a higher committee. Civil compensation and any criminal aspect follow from that assessment, so the committee stage is not a formality to be handled by the clinic manager alone. It is the stage at which the case is effectively decided.
The practical consequence is that your defence is assembled from documents that already exist when the complaint arrives. Nothing useful can be created afterwards.
The records that decide the outcome
Consent. A signed form is not consent. What the committee looks for is evidence that the specific risks of the specific procedure were explained in a language the patient understood, that alternatives were discussed, and that the person who took consent was the person qualified to explain the procedure. Generic consent forms covering a whole department are the weakest document in most files.
The clinical note. Contemporaneous, legible, attributable to a named practitioner, and recording the reasoning as well as the finding. Notes written after a complication, or amended without an audit trail, damage a defence far more than the gap they were meant to close.
Referral and escalation. Where a case moved beyond the facility's capability, the record should show when that was recognised and what was done. Delay in escalating is one of the most frequently criticised failures.
Incident reporting. A facility that identified an adverse event itself, recorded it, investigated it and changed something as a result presents very differently from one whose first written mention of the event is the patient's complaint.
Contracts, insurance and who carries the risk
Medical malpractice insurance is a licensing condition for practitioners and facilities, but the policy is only as good as its fit with what you actually do. Check that the scope of cover matches the licensed scope of practice, that visiting and locum practitioners are covered, that telemedicine consultations are within the policy, and that the notification clause is one you can comply with in the days after an incident rather than the weeks.
Employment and engagement contracts should say who reports an incident, who speaks to the authority, who holds the patient records, and what happens to those records when a practitioner leaves. Where a practitioner is engaged as an independent contractor rather than an employee, the facility does not escape regulatory responsibility for what happens on its premises, so the contract should allocate the commercial consequences deliberately instead of leaving them to be argued about later.
On forum, an ADGM-registered entity can agree that its commercial disputes with suppliers, landlords and practitioners are heard by the ADGM Courts under common-law rules. That choice does not move a patient's medical liability complaint out of the federal regime, and drafting that assumes otherwise creates false comfort. Keep the two categories separate in your documents.
Patient data
Patient records are among the most sensitive categories of personal data anyone holds. ADGM operates its own data protection regime, distinct from the federal Personal Data Protection Law, Federal Decree-Law No. 45 of 2021, and from the DIFC regime. An entity registered in ADGM but treating patients who are referred from, or followed up in, mainland facilities can find both regimes engaged at once.
Settle in writing: what is collected, on what basis, who inside the organisation can see it, which disclosures to regulators are permitted without further consent, how long records are retained, where they are stored, and what happens if data is transferred outside the jurisdiction. Requests for records also arrive from patients themselves, from insurers and from the authority during an investigation, and each of those has a different answer. A staff member improvising one under pressure is a risk in itself.
A short pre-opening checklist
- Confirm the facility activity list matches every service you intend to offer, including remote consultations.
- Verify each practitioner's licence and scope, and put a central renewal tracker in place.
- Rewrite procedure-specific consent forms and translate them properly.
- Fix the clinical records system, including amendment audit trails and retention periods.
- Read the insurance policy against the licensed scope, not against the brochure.
- Write an incident protocol that names the person who reports and the person who responds.
Where a dispute has already started, the priority is to secure the file as it stands and to answer the authority accurately and on time. Our work on medical dispute resolution covers the committee stage as well as the litigation that may follow.
Getting advice
If you are opening or restructuring a healthcare operation in ADGM, or you have received a complaint, contact the Nour Attorneys team. We can review your licensing position, your consent and records practice, and your insurance and contractual allocation of risk before those documents are read by someone else.
Disclaimer: The information provided in this article is for general informational purposes only and does not constitute legal advice. Readers should seek professional legal advice tailored to their specific circumstances before making any decisions or taking any action based on the content of this article.
Nour Attorneys Team
Related Resources
Explore more of our insights on related topics:
- Healthcare Facility Licensing Requirements in the UAE
- Medical Malpractice Defence Strategies for Dubai Clinics
- Pharmaceutical Compliance Guidelines for UAE Distributors
- Patient Privacy Regulations for Multinational Entities
