UAE Healthcare M&A: Regulatory Framework and Transactional Considerations

M&A activity in the UAE healthcare sector remains robust, driven by strategic consolidations and inbound investment into specialized care. However, these transactions are governed by a complex, multi-layered regulatory framework that demands precise navigation. This article outlines the regulatory landscape, key due diligence requirements, and the procedural steps necessary for a successful transaction.

The Regulatory Landscape

Healthcare regulation in the UAE operates at both the federal and emirate levels. Understanding the specific jurisdiction of each regulator is a prerequisite for any deal.

  • Dubai Health Authority (DHA): Governs the healthcare sector within the Emirate of Dubai, including its free zones (excluding Dubai Healthcare City).
  • Department of Health – Abu Dhabi (DOH): The regulator and policymaker for the healthcare sector in Abu Dhabi.
  • Ministry of Health and Prevention (MOHAP): Exercises jurisdiction over the Northern Emirates (Sharjah, Ajman, Umm Al Quwain, Ras Al Khaimah, and Fujairah) and sets federal-level healthcare policy.
  • Emirates Drug Establishment (EDE): A newly established federal authority that has taken over pharmaceutical and medical device regulation from MOHAP. For deals involving pharmaceutical manufacturers or medical device distributors, the EDE is the primary authority for marketing authorizations and product registrations.

Navigating these authorities requires an understanding that approvals are often parallel rather than sequential. A facility in Dubai, for instance, must maintain its commercial standing with the Dubai Department of Economy and Tourism (DET) while ensuring clinical compliance with the DHA.

Modern Dubai Corporate Office

Key Due Diligence Workstreams

Due diligence in healthcare transactions must extend beyond financial and commercial law reviews to address specific clinical and regulatory risks.

1. Licensing and Registration

A fundamental distinction exists between the entity license (the commercial license issued by the relevant Department of Economic Development or Free Zone Authority) and the medical facility license (the clinical permit issued by the DHA, DOH, or MOHAP).

Buyers must verify that the target holds a valid facility license appropriate for its activities (e.g., hospital, clinic, or diagnostic center) and that all medical staff, physicians, nurses, and allied health professionals, hold active professional registrations. Discrepancies here can halt operations immediately post-completion.

2. Data Privacy and Localization

Compliance with Federal Law No. 2 of 2019 (the “Health Data Law”) is a critical diligence item. The law mandates that health data related to services provided in the UAE must be stored and processed within the country.

Buyers must assess:

  • Whether the target’s electronic medical record (EMR) systems are hosted locally.
  • The target’s compliance with the 25-year data retention mandate.
  • Exposure to significant administrative fines, which can range from AED 500,000 to AED 700,000 for localization violations.

3. Medical Liability and Insurance

The assessment of historical medical malpractice claims is essential. Diligence should confirm that the target maintains mandatory medical malpractice insurance for all licensed professionals and that the coverage limits meet statutory requirements. In share deals, the buyer inherits the target’s entire liability history; in asset deals, these liabilities can theoretically be left behind, though regulatory “clean slates” are rare in practice.

4. Staffing and Emiratisation

As with any UAE entity, healthcare providers must meet Emiratisation quotas. Healthcare deals often face unique challenges in this area due to the specialized nature of clinical roles. Verification of staff credentials and the validity of work permits is a non-negotiable step in the employment law workstream.

Data Privacy and Security Diligence

Transaction Structuring and Completion

The choice between an asset purchase and a share purchase has profound implications for the regulatory completion process.

Asset vs. Share Deals

In a share purchase, the target entity remains the license holder, and the process typically involves updating the health authority’s records to reflect the new ownership. This is generally more efficient from a licensing continuity perspective.

In an asset purchase, the buyer can “cherry-pick” specific assets and contracts, leaving behind historical liabilities. However, the medical facility license is usually not transferable. The buyer must typically apply for a new facility license, which involves rigorous inspections of the physical premises and equipment. For a detailed breakdown of these structures, see our analysis of Asset vs. Share Purchases.

Change of Control and NOCs

Regardless of the structure, most healthcare regulators require prior notification of a change in ownership. Completion is often contingent upon receiving a No Objection Certificate (NOC) from the relevant health authority. Failure to obtain prior approval can result in the suspension of the facility license.

Merger Control

Since March 2025, new merger control thresholds have come into effect under Cabinet Decision No. 3 of 2025. A transaction must be notified to the Ministry of Economy if:

  1. The combined annual turnover of the parties in the UAE exceeds AED 300 million; or
  2. The combined market share exceeds 40%.

Given the 90-day statutory review period, merger control assessments must be conducted at the outset of any healthcare M&A transaction. For further details on these requirements, refer to our briefing on UAE Merger Control Thresholds.

Transaction Completion and Signing

Conclusion

Executing a healthcare transaction in the UAE requires a granular understanding of the interplay between federal data laws, emirate-level clinical regulations, and the newly updated competition regime. While the sector offers significant opportunities, the regulatory burden on completion, particularly regarding licensing transfers and data localization, is high.

Early engagement with legal counsel to map out the regulatory approval timeline and conduct targeted clinical due diligence is essential to mitigate deal risk. If you would like to discuss the legal requirements for a healthcare acquisition or expansion in the UAE, please get in touch with our team.

DROP US YOUR QUERY