Regulatory compliance in the UAE for medical devices is undergoing formal modernization. A new federal framework (Federal Decree-Law No. 38 of 2024) consolidates oversight and clarifies obligations for manufacturers, importers, and distributors. Success in 2025 hinges on correct device classification, appointing a UAE‑based authorized representative, and robust post‑market surveillance.
What Changed in 2024–2025
- New Federal Law: Consolidates regulation and expands scope to include AI‑based wearables, software as a medical device (SaMD), and biobanks.
- Institutional Transition: The Emirates Drug Establishment (EDE) is taking over responsibilities from the Ministry of Health and Prevention (MOHAP) as the central regulatory authority.
- Grace Period: Entities have a one-year transition period starting January 2, 2025, to align with the new provisions.
Device Scope and Classification
The law covers instruments, software, and wearables intended for diagnosis, monitoring, or treatment. Classification follows a risk-based model aligned with international standards:
- Class I: Low risk (e.g., bandages, surgical gloves).
- Class II/III: Medium risk (e.g., glucose meters, infusion pumps).
- Class IV: High risk (e.g., heart valves, pacemakers).
The Role of the Authorized Representative (MAH)
Foreign manufacturers must appoint a licensed UAE‑based Authorized Representative (AR) or Marketing Authorization Holder (MAH). This representative is responsible for:
- Handling regulatory submissions and file management.
- Vigilance reporting and executing recalls.
- Ensuring bilingual labeling compliance (Arabic and English).
Documentation and Quality Management (QMS)
To enter the market, manufacturers must provide a comprehensive technical file including:
- ISO 13485 Certification: Evidence of a compliant Quality Management System.
- Risk Management: Documentation aligned with ISO 14971.
- Proof of Origin: Free Sale Certificates and marketing authorizations from the country of origin (e.g., CE Mark, FDA 510k).
Labeling and Advertising Rules
All labels and Instructions for Use (IFUs) must be bilingual (Arabic and English). Furthermore, medical advertising requires prior approval from the regulatory authority. Claims must be accurate, scientifically proven, and must not mislead the public.
Post-Market Surveillance (PMS) and Data Privacy
Once a product is on the market, the MAH must maintain a Post-Market Surveillance plan. Connected devices must also comply with the UAE Data Protection Law (PDPL), focusing on:
- Secure design and cybersecurity patching.
- Patient data confidentiality and consent flows.
- Cross-border data transfer safeguards.
90‑Day Compliance Plan for 2025
Days 0–30: Map and Gap
Confirm device classification, audit your technical file, and appoint or verify your local Authorized Representative.
Days 31–60: File and Formalize
Translate labels into Arabic, prepare the submission dossier, and finalize Data Processing Agreements (DPAs) with vendors.
Days 61–90: Operate and Prove
Secure your registration certificate, activate PMS dashboards, and train teams on new advertising rules.
Frequently Asked Questions (FAQ)
1. Who is the primary regulator for medical devices in 2025?
While MOHAP currently manages registrations, the Emirates Drug Establishment (EDE) is the newly established central authority overseeing the sector.
2. Is Arabic labeling mandatory for all devices?
Yes, labels and IFUs must be available in both Arabic and English to ensure user safety and regulatory compliance.
3. How long is a medical device registration valid?
Registration certificates are typically valid for five years and must be renewed before expiration.
4. Can AI-based health apps be regulated as medical devices?
Yes, the 2024 law explicitly includes software and AI-enabled products used for medical diagnosis or monitoring.
5. What happens if a company fails to comply within the grace period?
Non-compliance can result in heavy fines, product seizures, market bans, and potential suspension of trade licenses.
