Welcome to the Saudi Arabia focus edition of Law Update.
One of the key markets in the Middle East and North Africa (MENA) that continues to lead from the front is the Kingdom of Saudi Arabia (KSA). As the largest country in the Middle East and the 18th largest economy in the world, the progress KSA continues to make is underpinned by its Vision 2030 that envisions developing the country as an investment powerhouse and hub that ultimately connects Asia, Europe, and Africa. Given Saudi Arabia’s significance to the regional economy, our team of experts have prepared a range of pertinent articles that provide insights into new laws, regulations, and the legal landscape in the Kingdom.
This edition will provide you with an up-to-date guide on matters such as; the framework issued by the Saudi Central Bank on IT governance, the anti-corruption landscape under Vision 2030; we also provide practical tips for dispute avoidance. This is only a snapshot; there are many more articles within the KSA focus section for you to read, which we hope you will find valuable and enjoyable.Read the edition
The Ministry of Health and Prevention introduces a process for transferring health data outside the United Arab Emirates.
Ministry of Health and Prevention (MOHAP) Resolution No. 51/2021 allowing health data transfers outside the UAE (Resolution) issued on 28 April 2021 became effective from 16 May 2021 being the date of publication in Gazette No. 702. Here are the salient points to enable the healthcare community to mobilise.
Federal Law No. (2) of 2019 concerning the Use of Information and Communications Technology in Health Fields (ICT Health Data Law) and its implementing regulations Cabinet Resolution No.32 of 2020, together regulate the uses of information and communications technology for the healthcare sector in the country. The ICT Health Data Law contains provisions concerning data processing, data security and confidentiality, and data localisation and is the primary UAE health data protection law.
In accordance with Article 13 of the ICT Health Data Law, health data cannot be stored, processed, generated, or transferred outside of the UAE, unless the activity has been approved by a resolution of a health authority in coordination with the MOHAP.
The Resolution provides long-awaited clarity on this topic.
Under the Resolution, MOHAP confirms the process for transferring health data outside UAE.
The basic position remains the same, health data and information (“Health Data”) may not be stored or transferred outside the UAE if it is related to health services provided inside the country, with the exception of the following cases:
The transfer of Health Data under these exceptions will be subject to strict controls concerning:
As the Resolution has been published in the Official Gazette and there are no apparent transitional mechanisms, it is in full legal effect as of now. Consequently, all regulated entities will need to comply. Therefore, healthcare industry operators and digital technology providers are encouraged to familiarise themselves with this Resolution with a view to bringing their activities into conformity.
Our leading Healthcare and Life Sciences Practice is the largest healthcare legal practice in the region. Our lawyers are available to support on every aspect of healthcare regulation compliance.