Pensieve Labs

Search the register

Search all 478 artefacts by title, document ID or content.

Unlock NDA tier

Jurisdiction | AE

United Arab Emirates

All markets
Federal PDPL, the Federal Law 2/2019 health-data localisation rule, DHA NABIDH and Riayati, and VAT with e-invoicing.

What the review turns on

Regulatory themes in this market

PDPL
Federal Decree-Law No. 45 of 2021. It sits alongside, not instead of, the health-sector localisation rule.
Health data localisation
Federal Law No. 2 of 2019 requires health data generated in the UAE to stay in the UAE, including in the free zones. It determines which deployment models can lawfully be offered at all.
NABIDH
Dubai Health Authority's exchange. Connection is understood to be a condition of a DHA facility licence, so it is a licence-continuity question before it is an interoperability question.
Riayati
The MoHAP federal exchange for the Northern Emirates: a separate onboarding with its own criteria, and no integration exists today.
DESC
The Dubai Electronic Security Centre's information security regulation, which a Dubai buyer's reviewer may raise. Pensieve holds no assessment against it and says so.
VAT
Five per cent, with the UAE tax invoice format and e-invoicing where it applies.

Bound values

What Pensieve’s paper resolves to in United Arab Emirates

These are not descriptions of the contract. They are the values the contract binds to when it is rendered for this market, taken from the same token registry the documents themselves read from, so a clause and this table cannot disagree.

FieldValueWhy it matters
Governing lawthe laws of the United Arab EmiratesThe law the master agreement is construed under.
Courtsthe courts of DubaiWhere a matter goes if arbitration is not used or is set aside.
Arbitration seatDubai International Arbitration CentreThe legal seat, which fixes the supervisory court.
Arbitration rulesthe DIAC Arbitration RulesThe procedural rules the reference runs under.
Data protection lawFederal Decree-Law No. 45 of 2021 on the Protection of Personal DataThe statute the processing agreement is written against.
Regulatorthe UAE Data OfficeWho the hospital, as controller or fiduciary, reports to.
Breach notification72 hoursThe controller's statutory clock. Pensieve notifies the hospital inside 4 hours of its own awareness, in every market.
CurrencyAEDThe currency the order form and every invoice are denominated in.
TaxVATThe indirect tax that appears on the invoice.
Standard rate5%Applied unless an exemption or reverse charge is evidenced.
Invoice formatUAE tax invoiceThe format the hospital's accounts payable system will accept.
Document languageen-AEThe language documents are issued in for this market.
Stamp dutyNot applicableWhether execution attracts duty, which, where it does, sits directly on the critical path to cash.

6 artefacts | jurisdiction AE

Written for United Arab Emirates, not translated into it

4 further artefacts are internal to Pensieve and not listed. The count is published rather than the existence concealed.

Open these in the register, with facets

74 artefacts | jurisdiction GL

The global set, which applies in United Arab Emirates too

Most of the register carries no jurisdiction because it carries all of them: how the platform is built, how it is defended, how data leaves at the end. Every market page sits on top of these. The eight below are the ones a hospital’s reviewers open first.

Open the whole global setWhat Pensieve holds, and what it does notWhich deployment model suits this market