Healthcare AI in the UAE: Regulation, Adoption & Deployment

Healthcare AI in the UAE: regulators, NABIDH, Malaffi and Riayati interoperability, data residency, adoption barriers and what deployment takes.

A guide to the UAE healthcare AI landscape: who regulates it, how health data flows between systems, what slows adoption, and what it takes to deploy AI responsibly.

Three Regulators, One Country

Healthcare in the UAE is regulated at both federal and emirate level. The Department of Health – Abu Dhabi (DoH) oversees the capital emirate. The Dubai Health Authority (DHA) regulates healthcare in Dubai. The Ministry of Health and Prevention (MOH) covers federal matters and the northern emirates. Each publishes its own policies and standards relevant to digital health and the use of patient data.

For anyone deploying AI, the practical consequence is that the same product may face slightly different expectations depending on where it is used. A hospital group operating across emirates needs to understand each regulator's requirements and design for the strictest relevant rule, rather than assuming one approval covers everything.

Federal law also matters, including UAE legislation on the use of information and communications technology in health and on personal data protection. These set the baseline for how health data may be stored, processed and shared.

Interoperability: NABIDH, Malaffi and Riayati

The UAE has invested heavily in health information exchanges. NABIDH connects providers in Dubai. Malaffi connects providers in Abu Dhabi. Riayati is the Ministry of Health and Prevention's platform serving facilities in the northern emirates. Together they make it increasingly possible for a patient's record to follow them between providers.

For AI, these exchanges are both an opportunity and a constraint. They mean richer, more complete data is available to authorised clinicians, which can make decision support and summarisation more useful. They also mean AI systems must integrate through approved routes and standards rather than copying data into unmanaged stores.

Interoperability standards such as HL7 FHIR are central here. AI teams that build on standard interfaces from the outset find integration and regulatory review much smoother than those who build bespoke connections.

Data Residency and Cloud

Health data in the UAE is generally expected to be stored and processed within the country unless specific conditions are met. This shapes which cloud regions, model endpoints and vendors a hospital can use for AI. Both Microsoft Azure and Google Cloud operate UAE regions, which makes compliant enterprise AI architectures achievable, but the availability of specific AI services in-country should be checked case by case.

Residency is not only about where data sits. It includes where prompts are processed, where logs are kept, where backups live and where support staff can access systems from. Mature programmes document all of these flows and review them with information security and legal teams before go-live.

International frameworks such as HIPAA and GDPR are often used as reference points by multinational vendors, and they are helpful benchmarks, but they do not replace UAE requirements.

What Slows Adoption

The barriers to healthcare AI adoption in the UAE are similar to those elsewhere, with some local twists. Data is often spread across systems and not yet in a shape AI can use. Clinical teams are understandably cautious about tools that could affect patient safety. Procurement and security reviews take time, especially for new categories of product.

Language is a particular factor. The UAE's patient population and workforce are highly diverse, and Arabic and English, along with many other languages, are used daily. AI tools trained mainly on Western data and English text may underperform, so local evaluation is essential.

Finally, many organisations have run pilots that never reached production because success was not defined at the start. Without baselines and clear criteria, even a good pilot struggles to win the case for scale.

What It Takes to Deploy

Successful deployments in the UAE tend to share a pattern. A governance committee approves the use case and its risk tier. KPIs are measured before work begins. A controlled pilot runs with clinical validation and clear exit criteria. Integration uses approved standards and health information exchange routes. Data stays within compliant regions. And staff are trained and supported, not just given a login.

Use cases that fit this pattern well include ambient clinical documentation and voice AI agents for patient communication, which are discussed in AI voice agents in healthcare and ambient clinical voice technology. Security considerations are covered on healthcare AI security and governance.

The full method is set out in the healthcare AI strategy framework.

About the Author

This guide is written by Karthik Telidevara, Manager – AI Strategy & Transformation at Burjeel Holdings, based in Abu Dhabi. If you are looking for the person rather than the landscape, the page on my work as a Healthcare AI Expert in the UAE explains who I am and how I work, and healthcare AI expert in Abu Dhabi focuses on the emirate where I am based. Media coverage is on the press page.

Frequently Asked Questions

Who regulates healthcare AI in the UAE?

There is no single AI-specific regulator for healthcare. The Department of Health – Abu Dhabi, the Dubai Health Authority and the Ministry of Health and Prevention each regulate healthcare in their jurisdictions, including the use of patient data by AI systems, within federal law.

What are NABIDH, Malaffi and Riayati?

They are UAE health information platforms: NABIDH in Dubai, Malaffi in Abu Dhabi, and Riayati, the Ministry of Health and Prevention's platform for the northern emirates. AI systems should integrate with them through approved routes.

Does health data have to stay in the UAE?

Generally, health data is expected to be stored and processed in the UAE unless specific conditions are met. This affects the choice of cloud regions and AI services, and should be confirmed with legal and regulatory guidance.

Where can I find a Healthcare AI Expert in the UAE?

Karthik Telidevara is a Healthcare AI Expert in the UAE based in Abu Dhabi. His profile and approach are described on the Healthcare AI Expert in the UAE page.