A record system that meets the NABIDH minimum data set and passes connectivity before the licence is activated, and consent and access control to DHA's standard. NABIDH is DHA's health information exchange connecting public and private facilities in Dubai.
What the standards say
DHA's Standards for Health Information Consent and Access Control, DHA/HISHD/ST-09, took effect on 2 April 2025. They define NABIDH as the health information exchange connecting public and private facilities in Dubai, say consent is not required to upload health information to NABIDH, and require a NABIDH access consent clause.1 The licensing manual makes a NABIDH compliant record and connectivity a condition of activation.2 The interoperability standards set the message formats.3
- Ask your vendor for the minimum data set. In writing, field by field.
- Test connectivity. And keep the approval email.
- Add the access consent clause. To your patient forms.
- Set access by role. And log every read.
- Record system ______ Vendor ______
- Minimum data set confirmed on ______
- Connectivity approval on ______
- Access consent clause added on ______
Questions
Is patient consent needed to upload to NABIDH?
No, DHA's standard says consent is not required for uploading. Access is governed by a NABIDH access consent clause.
Must we connect before opening?
Yes, connectivity is a condition of licence activation.
Where must the data be kept?
In the UAE, under Federal Law No. 2 of 2019.
Sources
- 1Dubai Health Authority, 2025Standards for Health Information Consent and Access Control, DHA/HISHD/ST-09, effective 2 April 2025Read source
- 2Dubai Health Authority, 2024Manual for Licensing Health Facility, version 1.1, effective 20 November 2024Read source
- 3Dubai Health Authority, 2025NABIDH Standards for Interoperability and Data ExchangeRead source
Written by the wai team from Dubai Health Authority guidance, checked on 15 October 2026. This is guidance, not legal advice. DHA does not endorse wai or any software.