Overview
The Dubai Health Data Protection Regulation (DHCC Regulation No. 7 of 2013) is a health information privacy and protection regulation issued by the Dubai Healthcare City Authority (DHCA). The regulation establishes requirements for the collection, use, disclosure, storage, and protection of Patient Health Information (PHI) within Dubai Healthcare City (DHCC). It aims to safeguard the confidentiality, integrity, and security of health data while supporting effective healthcare delivery and evidence-based decision-making. The regulation applies to entities licensed within DHCC and sets out obligations for consent management, data security, access controls, data retention, breach handling, and compliance monitoring. It also provides a framework for protecting patient privacy and ensuring responsible management of health information in accordance with healthcare regulatory requirements