United Arab Emirates

By Charles Laubach and Imran Asghar

The Authors

Charles Laubach
Partner
claubach@afridi-angell.com
Tel: +971 4 330 3900

Charles is a partner at Afridi & Angell’s Dubai office. He has practiced as a legal consultant in the UAE since 1986. He advises on general corporate matters, military procurement and offsets, project finance, employment, and international trade controls. Charles is a member of the Pennsylvania and DC Bars. He holds a JD and an MA from the University of Pennsylvania, an MA from the University of London School of Oriental and African Studies, and a BA from Dartmouth College.

Imran Asghar
Associate
iasghar@afridi-angell.com
Tel: +971 4 330 3900

Imran’s practice focuses on corporate and commercial law, as well as mergers and acquisitions. He advises clients in domestic and cross border transactions in connection with acquisitions, divestitures, and corporate restructuring matters. Imran is a member of the Pakistan Bar Association. He holds an LLM from the University of Warwick and an LLB from the University of London.

Recent events, including the investigations into Facebook’s handling of its users’ personal data, have highlighted the realisation that personal data is, in today’s world, one of the most valuable resources for any business and that businesses not only collect and store their customers’ personal data but also use and even sell it for profit.

While there is no single federal data protection law in the UAE, and UAE law does not recognise concepts such as data controllers and data processors, over the years, there have been number of sectoral laws that deal with data protection. These include Federal Law 5 of 2012 on Combating Cyber Crimes, Federal Law 3 of 2003 Regarding the Organisation of Telecommunications Sector, and the UAE Central Bank’s Regulatory Framework for Stored Values and Electronic Payment Systems. There are also data protection laws in some of the UAE’s free zones, such as the Dubai International Financial Centre, the Abu Dhabi Global Market and Dubai Healthcare City. Dubai has a few of its own laws that deal with data protection in certain contexts, eg, Dubai Law 28 of 2015 Concerning Dubai Statistics Centre and Dubai Law 26 of 2015 on the Regulation of Data Dissemination and Exchange in the Emirate of Dubai.

A new sectoral data protection law, Federal Law 2 of 2019 Concerning the Use of the Information and Communication Technology in the Areas of Health (the New Law), has been published and is set to come into force in May 2019. The New Law is aimed at regulating the collection, processing and transfer of electronic health data that originates in the UAE and will apply to all “information and communication technology methods and uses” in the healthcare sector in the UAE, whether onshore or in any of the free zones (including the Dubai Healthcare City).

The New Law will apply to all businesses that handle health data and information such as healthcare facilities and providers, pharmacies, medical insurance providers and intermediaries, service providers assisting with medical claims management, as well as technology service providers servicing the healthcare industry. Essentially, all businesses that process data relating to patient names, consultation, diagnosis and treatment, alpha-numerical patient identifiers, common procedural technology codes, medical scan images and laboratory results will have to comply with the New Law.

In view of the consistently fast paced development of healthcare related technology, the scope of application of the New Law could be much wider than was probably contemplated at the time of drafting it. A lot of the devices that we use in our day-to-day lives such as mobile phones and digital wrist watches have features that provide healthcare support. All businesses that manufacture such devices or develop applications that operate on these devices to provide healthcare support are likely collecting, processing and (in some cases) transferring data relating to fitness and lifestyles in the UAE, and as such, will likely fall under the scope of the New Law’s application.

The New Law requires businesses that use information and communication technology for processing health data to ensure its confidentiality, accuracy and validity, as well as its availability when required.

Some of the key features of the New Law are:

  • a general prohibition on transfer of health data outside the UAE, subject to an authorisation by the relevant health authority;
  • establishment and management of a central system by the UAE Ministry of Health and Prevention to store, exchange and collect healthcare data and information in compliance with the parameters set by the New Law; and
  • a data retention period of not less than 25 years.

The parameters for storing health data and information inside the UAE will be defined by a resolution issued by the UAE Minister of Health and Prevention.

Non-compliance with the New Law may attract fines of up to Dh1 million. Other disciplinary sanctions include notices and warnings, and also the suspension or cancellation of an entity’s license.

Although a welcome step towards protection of healthcare data, the New Law is not the first law that regulates healthcare data in the UAE. UAE Federal Law 7 of 1975 concerning the Practice of Human Medicine Profession and the Ministry of Health Code of Conduct 1988 concerning the collection of health data impose obligations of confidentiality on healthcare practitioners. Those previous healthcare laws remain in effect, although the New Law repeals inconsistent provisions of prior law.

The timeframe to ensure compliance with the New Law as well as the scope of its application will be known once the underlying implementing regulations are issued. All concerned parties should closely monitor legislative developments in this regard and obtain legal advice to prepare for compliance with the New Law. ■

Afridi & Angell

Founded in 1975, Afridi & Angell is a full-service UAE law firm in its fifth decade at the forefront of the legal community. From the beginning, our hallmarks have been a commitment to quality, unsurpassed knowledge of the law and the legal environment, and crafting of innovative business solutions. Licensed in the three largest Emirates of Abu Dhabi, Dubai and Sharjah as well as the Dubai International Financial Centre, our practice areas include banking and finance; corporate and commercial law; arbitration and litigation; construction; real estate; infrastructure projects; energy; project finance; maritime (wet and dry); and employment. We advise local, regional and global clients ranging in size and sophistication from start-ups, sole proprietorships, family-owned businesses, entrepreneurs and investors to some of the world’s largest public and private companies, governments and quasi-government institutions. We attract and retain clients with our dedication to practical guidance focused on their business needs supported by decades of experience here in our home jurisdiction, the UAE.

Afridi & Angell is the exclusive member firm in the UAE of top legal networks and associations, most notably Lex Mundi, the world’s leading network of independent law firms, and World Services Group.

www.afridi-angell.com

 

Afridi & Angell’s inBrief provides a brief overview and commentary on recent legal announcements and developments. Comments and opinions contained herein are general information only. They should not be regarded or relied upon as legal advice.

© 2019, Afridi & Angell

Related Articles by Firm
Regulatory Authorities to regulate Relevant Activities in accordance with Economic Substance Regulations announced
Businesses licensed in the UAE should fast track an assessment to determine if they are subject to the regulations.
UAE Ministry of Finance issues guidance on Economic Substance Regulations
Thirteen topics covered in the guidance that may be of interest to businesses affected by the regulations.
Law 6 of 2019: On the ownership of common property in the Emirate of Dubai
The New Law is an important development for Dubai as most real estate is held by way of property owned in common.
The private equity, venture capital and start-up ecosystem in the UAE: Recent developments
The changes will result in the establishment of new funds and attract more entrepreneurs and investors to the UAE.
SCA issues guidelines for financial institutions on anti-money laundering
The advent of AML and ATF guidance is a welcome step for businesses in the UAE.
Proposed New DIFC Data Protection Law
The DIFC Authority has proposed the enactment of legislation (the Proposed Law) to replace its current Data Protection Law.
New economic substance regulations in the UAE
The rules are a response to the UAE being put on the EU's blacklist of non-cooperative tax jurisdictions.
Keeping up with the trend: The New DIFC Insolvency Law
The New Law introduces many welcomed features and is a step forward in maintaining the UAE’s position as a world leading trade hub.
The New DIFC Employment Law: Key Changes
The new law will directly affect almost 24,000 employees based in the DIFC.
Merger clearance matters in the UAE
Despite the limited number of filings and the dearth of decisions, parties conducting M&A in or from the UAE should consider the impact of the competition regime.
New regulations offer welcome guidance to Anti-Money Laundering Law
The new AML Law has been shaped by international AML standards and provides several mechanisms to combat money-laundering.
New Tawazun economic programme policy guidelines issued
It is hoped that the new programme will enable defence contractors to identify more accessible opportunities to generate offset credits.
New administrative fines imposed by the UAE Insurance Authority
Insurance and reinsurance providers should review the resolution and the list of violations to ensure their compliance.
Significant changes to UAE’s Civil Procedure Code
While the changes are welcome, they put pressure on litigants to plead their cases within relatively short time periods ...
New long-term residency visas in UAE
In a welcome development, the new law introduces long-term residency visas for four categories of persons.
New promotion regime for domestic funds
A new agreement could make the UAE a much more attractive place to establish funds.
Federal Penal Code amendments
The amendments are designed to make the UAE's Penal Code consistent with other recent federal legislation and current federal enforcement policies.
Netting arrangements made enforceable in the UAE
For decades, banks and other counterparties in the UAE have obtained financial services from foreign financial institutions. Industry bodies, such as the International Swaps and Derivatives Association (ISDA), the International Capital Market Association and the International Securities Lending Association, have ...
New anti-money laundering law
The new law introduces subtle but important changes to the AML landscape in the UAE.
The UAE's new Foreign Direct Investment Law
Majority foreign ownership is not yet a reality, but the framework is now in place.
Significant precedents from the DIFC courts
Afridi & Angell successfully defended an anti-suit injunction, an application to exclude evidence and obtained a document production order.
New services by Dubai Rental Disputes Centre
The Rental Good Conduct Certificate service is a first-of-its-kind initiative in the world.
ADGM announces tech start-up licensing regime
The licence provides access to a Professional Services Support Programme aimed at allowing entrepreneurs entry to a community of businesses, financial services and professional advisers.
Dubai relaxes rules on filing appeals before the Court of Cassation
The Decree provides that appeals to the Court of Cassation must be filed within 60 days of the judgment of the Court of Appeal.
Off-plan sales in Dubai: Risks and rewards
Whether buyers are looking to expand their real estate portfolio or buyers are simply looking to find their ideal home, great deals can be found in Dubai’s off-plan real estate sector ...
The UAE Federal Arbitration Law: A First Look
The approval of the long-awaited law by the Federal National Council was announced in March this year.
Legal reforms in Abu Dhabi
Abu Dhabi has introduced new rules governing the functioning of the Emirate’s judiciary.
UAE: Off-plan sales: risks and rewards
Great deals can be found in Dubai’s off-plan real estate sector, but it is critical that prospective buyers do their homework ...
The New UAE Pledge Law – Security Registration
UAE Federal Law 20 of 2016 introduced a new regime for registering a pledge over moveable assets which are pledged as security for the repayment of a debt ...
UAE VAT Designated Zones Defined
A Designated Zone is required to be a specific fenced area with security measures and Customs controls in place ...
Certificate of Good Conduct Required for all UAE Employment Visas
New requirement will be introduced shortly ...
Dubai: Dawn Raids – Do you have a policy in place, and is it fit for purpose?
How you handle a dawn raid will have a significant impact on the discussions and negotiations that are sure to follow.
Dubai: Changes to Law Allowing Developers to Terminate Off-Plan Sales Contracts
An important development that will assist developers who are facing a difficult real estate market ...
UAE VAT Executive Regulation Update: Free Zone Guidance
The UAE Ministry of Finance has announced the Executive Regulation for the Federal Decree-Law ...
Opportunities in Dubai’s Healthcare Sector
Dubai is the fastest growing healthcare market within the GCC and is becoming an increasingly attractive sector for investors. Afridi & Angell explain the key drivers and options available to investors ...
VAT registration in the UAE has commenced
The United Arab Emirates Federal Tax Authority has commenced accepting registrations for Value Added Tax through its online portal ....
UAE: VAT and Excise Tax
The UAE has issued substantive law on Value Added Tax (VAT) and Excise Tax ...
New Ministerial Decision brings clarity to Private Joint Stock Companies
The private joint stock company is one of the forms of company contemplated by UAE Federal Law No. 2 of 2015 concerning commercial companies ...
Be VAT ready - Tax Procedures Law is already here
Under the VAT regime, businesses will be collecting taxes on behalf of the government and will file tax returns accordingly ...
UAE – Centre for Amicable Settlement of Disputes update
Centre for Amicable Settlement of Disputes can no longer mediate disputes when a bank is a party to such dispute ....
New UAE Funds Regime
The UAE has embarked on an ambitious undertaking by introducing new business friendly mutual funds regulations to stimulate the UAE funds industry and provide the foundation for a more developed regional funds regime in the Gulf Cooperation Council ...
New UAE Pledge Law over Movable Assets
The new Pledge Law of the UAE was enacted on 12 December 2016 ...
Doing Business in Iran: Donald J. Trump; Mining Investment Opportunities
The election of Mr. Donald J. Trump as President of the United States has resulted in much consideration by corporates of existing strategies with respect to Iran...
The UAE Competition Law Clarified
Two Cabinet Decisions have been issued which provide guidance on the implementation of the Competition Law, particularly on market share thresholds and on small and medium establishments.
Potential Criminal Liability for Arbitrators and Experts in the UAE
The UAE Penal Code was amended to introduce the concept of criminal liability for arbitrators, experts, and translators who issue dishonest and partial decisions and opinions.
The New UAE Bankruptcy Law
Perhaps the most important new feature of the new Law is the introduction of a regime that allows for protection and reorganization of distressed businesses ...
Doing Business in Iran: The Momentum Builds
The momentum for doing business in Iran is expected to increase at an even greater pace after the November US elections.
Proposed Insurance Authority Decision Concerning Marketing of Insurance Policies by Banks in the UAE
The Emirates Insurance Authority prepared a draft regulation concerning marketing of insurance policies by banks in the UAE.
The thing about … Amjad Ali Khan
Recently in Dubai, ASIAN-MENA COUNSEL’s Patrick Dransfield photographed Amjad Ali Khan, the co-founder and Managing Partner of Afridi & Angell and also put to him a series of questions on behalf of the <...
UAE Ministerial Decision No. (272) of 2016
The Ministerial Decision No. (272) of 2016 addresses the scope of Article 104 of Federal Law No.2 of 2015, stating which articles relating to public and private joint stock companies apply to limited liability companies.
Doing Business in Iran: the banking bottleneck
With the easing of sanctions against Iran, vast business opportunities have opened up. The challenge is whether and how to participate in such a potentially phenomenal market without taking undue risks.
Doing Business in Iran: Life After (Secondary) Sanctions
The legal landscape for doing business in Iran has changed significantly since the easing of certain Iran related sanctions.
Doing Business in Iran: Life After (Secondary) Sanctions
The legal landscape for doing business in Iran has changed significantly in the past seven months ...
UAE Legal Bulletin
Updates on the possibility of a Value Added Tax, the new PPP Law and other developments which companies doing business in the UAE should know
UAE's New Labour Regulations Take Effect January 1, 2016
A number of recently announced initiatives could introduce potentially significant changes to the rules governing the workforce in the UAE.
Introducing the Dubai World Trade Centre Free Zone
Aside from its central location and its world class facilities, the Dubai World Trade Centre Free Zone offers a wide range of services for companies.
UAE Legal Bulletin July-August 2015
Insights into the new Commercial Companies Law and relevant corporate updates which can help companies conduct business in the UAE, particularly in Dubai
The New UAE Commercial Companies Law – A First Look
We highlight the changes which the new UAE Commercial Companies Law (Federal Law No.2 of 2015) introduces.
Do I need a DIFC will?
With the opening of the Wills and Probate Registry in the DIFC, it is now possible to register a will in Dubai and have a high degree of confidence that it will be enforced.
DFSA imposes record fine on Deutsche Bank
The Dubai Financial Services Authority (DFSA) imposes its largest fine to date on Deutsche Back AG Dubai (DIFC Branch), sending a strong signal that DFSA is both independent and unafraid to take on well-resourced opponents.
Abu Dhabi Global Market starts first phase of activities
Effective 15 June 2015, the Abu Dhabi Global Market began accepting license applications from existing non-financial service tenants of Al Maryah Island that have either a private limited or branch office legal structure.
Dubai Statistics Center – you may be next!
Companies in the Emirate of Dubai have recently been receiving questionnaires requesting detailed information about their business, including financial information...
Free Zones in the UAE – an overview
Strategically located between Europe, Africa and Asia, the United Arab Emirates has become a hub for trade and commerce throughout the world ...
UAE Competition Law - All bark and no bite?
Federal Law No. 4 of 2012 on the regulation of competition (the “Competition Law”) introduced a regime for the regulation of anti- competitive behavior in the UAE which previously did not exist ...
Related Articles
Can backdating be acceptable?
The effective date of a contract under Vietnamese laws.
Amendment to the Consumer Protection Act 
The Act strengthens the law relating to the safety of products and services.
Regulating the sale and provision of digital content through mobile cellular networks
Regulations on digital content are becoming more relevant as investor interest in the Indonesian market rises.
Related Articles by Jurisdiction
UAE procurement; a bigger role for the private sector
In early February, the UAE announced a major government shake-up to prepare the UAE for the future. Under the new plans, a number of ministries are ...
The new UAE Pledge Law
Promulgation of regulations that make registration available.
Latest Articles
Can backdating be acceptable?
The effective date of a contract under Vietnamese laws.
Amendment to the Consumer Protection Act 
The Act strengthens the law relating to the safety of products and services.