Skip to main content
Pensieve Labs

Search the register

Search all 586 artefacts by title, document ID or content.

Unlock NDA tier

Jurisdiction | AE

United Arab Emirates

Federal PDPL, the Federal Law 2/2019 health-data localisation rule, DHA NABIDH and Riayati, and VAT with e-invoicing.

What the review turns on

Regulatory themes in this market

PDPL
Federal Decree-Law No. 45 of 2021. It sits alongside, not instead of, the health-sector localisation rule.
Health data localisation
Federal Law No. 2 of 2019 requires health data generated in the UAE to stay in the UAE, including in the free zones. It determines which deployment models can lawfully be offered at all.
NABIDH
Dubai Health Authority's exchange. Connection is understood to be a condition of a DHA facility licence, so it is a licence-continuity question before it is an interoperability question.
Riayati
The MoHAP federal exchange for the Northern Emirates: a separate onboarding with its own criteria, and no integration exists today.
DESC
The Dubai Electronic Security Centre's information security regulation, which a Dubai buyer's reviewer may raise. Pensieve holds no assessment against it and says so.
VAT
Five per cent, with the UAE tax invoice format and e-invoicing where it applies.

Bound values

What Pensieve’s paper resolves to in United Arab Emirates

These are not descriptions of the contract. They are the values the contract binds to when it is rendered for this market, taken from the same token registry the documents themselves read from, so a clause and this table cannot disagree.

FieldValueWhy it matters
Governing lawthe laws of the United Arab EmiratesThe law the master agreement is construed under.
Courtsthe courts of DubaiWhere a matter goes if arbitration is not used or is set aside.
Arbitration seatDubai International Arbitration CentreThe legal seat, which fixes the supervisory court.
Arbitration rulesthe DIAC Arbitration RulesThe procedural rules the reference runs under.
Data protection lawFederal Decree-Law No. 45 of 2021 on the Protection of Personal DataThe statute the processing agreement is written against.
Regulatorthe UAE Data OfficeWho the hospital, as controller or fiduciary, reports to.
Breach notification72 hoursThe controller's statutory clock. Pensieve notifies the hospital inside 4 hours of its own awareness, in every market.
CurrencyAEDThe currency the order form and every invoice are denominated in.
TaxVATThe indirect tax that appears on the invoice.
Standard rate5%Applied unless an exemption or reverse charge is evidenced.
Invoice formatUAE tax invoiceThe format the hospital's accounts payable system will accept.
Document languageen-AEThe language documents are issued in for this market.
Stamp dutyNot applicableWhether execution attracts duty, which, where it does, sits directly on the critical path to cash.

0 artefacts | jurisdiction AE

Written for United Arab Emirates, not translated into it

No United Arab Emirates artefact is visible at your access level.

The global set below applies in this market in full, and it is public.

18 artefacts | jurisdiction GL

The global set, which applies in United Arab Emirates too

Most of the register carries no jurisdiction because it carries all of them: how the platform is built, how it is defended, how data leaves at the end. Every market page sits on top of these. The eight below are the ones a hospital’s reviewers open first.

WPR-GL-001WhitepaperGL1234NDACritical path31 July 2026

Accept the mutual NDA to request access to this tier. Your acceptance is recorded at once and protects both sides; an administrator then grants access, with a target of four business hours.Accept the mutual NDAWait: four business hours (target)

WPR-GL-002DisclosureGL1234NDACritical path01 August 2026

Accept the mutual NDA to request access to this tier. Your acceptance is recorded at once and protects both sides; an administrator then grants access, with a target of four business hours.Accept the mutual NDAWait: four business hours (target)

WPR-GL-004WhitepaperGL1234NDACritical path31 July 2026

Accept the mutual NDA to request access to this tier. Your acceptance is recorded at once and protects both sides; an administrator then grants access, with a target of four business hours.Accept the mutual NDAWait: four business hours (target)

DPA-GL-001ContractGL1234NDACritical path29 August 2026

Accept the mutual NDA to request access to this tier. Your acceptance is recorded at once and protects both sides; an administrator then grants access, with a target of four business hours.Accept the mutual NDAWait: four business hours (target)

SLA-GL-001ContractGL1234NDACritical path29 August 2026

Accept the mutual NDA to request access to this tier. Your acceptance is recorded at once and protects both sides; an administrator then grants access, with a target of four business hours.Accept the mutual NDAWait: four business hours (target)

DIS-GL-009DisclosureGL1234NDACritical pathReview due29 August 2026

Accept the mutual NDA to request access to this tier. Your acceptance is recorded at once and protects both sides; an administrator then grants access, with a target of four business hours.Accept the mutual NDAWait: four business hours (target)

WPR-GL-400WhitepaperGL1234NDACritical path31 July 2026

Accept the mutual NDA to request access to this tier. Your acceptance is recorded at once and protects both sides; an administrator then grants access, with a target of four business hours.Accept the mutual NDAWait: four business hours (target)

Open the whole global setWhat Pensieve holds, and what it does notWhich deployment model suits this market