Three-Tier Regulatory Structure for Medical Devices in the UAE: EDE, MOHAP and Emirate-Level Health Authorities

1. Key takeaways

Medical device regulation in the UAE is a three-tier structure in which each tier regulates a different object. The EDE regulates products (marketing authorization, classification, pricing, vigilance and traceability); the Ministry of Health and Prevention (MOHAP) carries health policy and the regulation of facilities and personnel at the federal level; and the emirate-level health authorities — the Dubai Health Authority (DHA), the Department of Health Abu Dhabi (DOH) and the Sharjah Health Authority (SHA) — regulate healthcare facilities, professional licensing and the point of use within their jurisdictions. Article 1 of Federal Decree-Law No. 38/2024 brings the emirate-level bodies into the same legislative system through the expression “Competent Health Entity”. Our judgement is clear: obtaining an EDE marketing authorization is not the same as obtaining an establishment licence, and vice versa; the two cannot substitute for each other.

• The EDE regulates products: marketing authorization, classification, pricing, vigilance and traceability.
• MOHAP carries federal-level health policy and the regulation of facilities and personnel.
• The emirate-level authorities DHA, DOH and SHA regulate facilities, professional licensing and use within their jurisdictions.
• Article 1 of Decree-Law No. 38/2024 uses the term “Competent Health Entity” to encompass the emirate-level bodies.
• A product licence and an establishment licence are independent and non-interchangeable.

2. Legal basis

The table below presents the provisions that construct the three tiers, together with the emirate-level reporting standard whose timelines run in parallel with the federal vigilance obligations and must be tracked separately.

3. Expert insights

Insight 1: The product line and the establishment line are two parallel compliance chains, and with either one missing an actual sale cannot take place. Our judgement is that the most common misjudgement among Chinese manufacturers is to treat the EDE marketing authorization as a “customs clearance licence”. In reality, for a product to enter hospital use, it also depends on a licensed importer, a medical warehouse licence, and the professional and procurement compliance of institutions within the emirate-level jurisdiction. Article 6(1)(a) restricts applicants to marketing offices, manufacturers, contract manufacturing companies or a medical warehouse designated by the rights holder — which is precisely why the product licence and the establishment licence must both exist at the same time.

Insight 2: Emirate-level requirements are not “reference items”; they are independent obligations. The DOH Standard on Medical Device Reporting requires that deaths, serious injuries, malfunctions and events requiring remedial action to avoid a significant risk to public health be reported within 5 days of awareness, that reports on other devices be made no later than 15 days, and that supplementary information missing from an initial report be provided within 1 month of receipt. Our judgement is that these timelines run in parallel with the federal vigilance obligations, and a company cannot use “we already reported to the EDE” as a substitute for reporting to the DOH. Entities operating in Dubai and Sharjah must separately verify the corresponding requirements of the DHA and the SHA.

Insight 3: Operating across several emirates requires a responsibility matrix; coverage cannot be left to a single agent by default. We recommend building a responsibility matrix along three dimensions — product, establishment and jurisdiction: product-side obligations belong to the EDE, establishment-side obligations belong to the emirate-level health authority that issued the licence, and use-side and reporting obligations within a jurisdiction are borne by the entity actually operating there. The reason is that Article 21 places the obligations on the rights holder, while Article 22 requires the designation of 1 lead institution to uniformly handle licensing affairs, vigilance and whole-life-cycle management; if the matrix is unclear, responsibility will concentrate back onto the rights holder when an incident occurs.

4. Practical recommendations

• Maintain separate product compliance files and establishment compliance files, specifying the issuing department, validity period and renewal owner for each, and do not merge their management.
• Verify reporting timelines and format requirements emirate by emirate where the company operates, applying the DOH 5-day and 15-day standards in Abu Dhabi.
• Within the framework of Article 22, identify the lead institution and state in the contract the specific scope of its responsibility for licensing affairs, vigilance and whole-life-cycle management.
• Design a unified incident intake entry point for multi-emirate operations, so that the same incident does not produce reporting time gaps across jurisdictions.
• Schedule the siting and staffing of establishment licences (marketing office, medical warehouse) in advance, running their timelines in parallel with the product registration timeline (practical estimate: from zero preparation to formal market entry, 6–18 months).
• When signing supply agreements with the hospital side, state the establishment licence status and the product registration status as separately made representations, avoiding conflation.

5. Verification checklist

• □ A list of the emirates in which the company operates has been drawn up, and the name of the competent health entity confirmed for each.
• □ It has been confirmed that the EDE marketing authorization and the establishment licence belong to different departments and each has an independent validity period.
• □ Reporting trigger mechanisms based on the 5-day and 15-day DOH standards have been set up.
• □ The lead institution under Article 22 and its vigilance duties have been written into the contract.
• □ The medical warehouse or marketing office licence has been confirmed to cover the categories of products to be dealt in.
• □ A unified logging and distribution record for cross-emirate incidents has been established.
• □ It has been confirmed that the owners of responsibility for product registration, establishment licensing and in-jurisdiction use are distinct and traceable.

Further reading: Article 03 “The Definitional Boundaries of “Medical Equipment” under UAE Law: Reading Articles 1 and 2”; Article 05 “Federal Decree-Law No. 28/2023: The EDE’s Statutory List of Powers and What Each Means for Companies”; Article 42 “Adverse Event Reporting Timelines: The Federal Position and the Abu Dhabi DOH 5-Day/15-Day Standards”.

Regulatory information verified as of October 29, 2026.

How GRZAN can help. GRZAN provides medical device and IVD registration, quality system, authorised representative and local testing support for the United Arab Emirates. Our team manages MOHAP registrations and free-zone (DHCC) pathways, and supports post-market vigilance obligations. Business enquiries: info@grzanglobal.com