Digital Health Regulation in GCC: What You Need to Know Before You Launch

The pace of digital health innovation in GCC has outstripped the pace of regulation — until recently. Over the past 18 months, Saudi Arabia, UAE, and Qatar have each published substantive regulatory frameworks for digital health products, AI-assisted diagnostics, and telemedicine platforms.

Saudi Arabia: SFDA Digital Health Framework

The Saudi Food and Drug Authority published its digital health product classification guidance in late 2023. Products are classified into three risk tiers, with Class C (high-risk, including AI diagnostic tools) requiring full clinical evidence packages. The framework broadly follows ISO 13485 and IEC 62304 but with specific requirements for Arabic-language interfaces.

UAE: DOH and DHA Digital Health Strategy

The UAE's framework is split between emirate-level health authorities. Abu Dhabi's DOH and Dubai's DHA have both published digital health regulations that require registration for software-as-a-medical-device. The UAE has taken a particularly progressive stance on AI in diagnostics, with a dedicated approval pathway for AI-assisted tools.

Practical implications for product teams

If you are launching a digital health product in GCC, regulatory strategy must be integrated into product development — not added at the end. This means CE marking or FDA clearance, while helpful, is not sufficient. You will need localisation of clinical evidence, Arabic UI/UX, and in-country data hosting for products processing patient data.

Biowave's digital health practice can support regulatory strategy, evidence generation, and stakeholder engagement across GCC digital health frameworks.