Welcome to the Saudi Arabia focus edition of Law Update.
One of the key markets in the Middle East and North Africa (MENA) that continues to lead from the front is the Kingdom of Saudi Arabia (KSA). As the largest country in the Middle East and the 18th largest economy in the world, the progress KSA continues to make is underpinned by its Vision 2030 that envisions developing the country as an investment powerhouse and hub that ultimately connects Asia, Europe, and Africa. Given Saudi Arabia’s significance to the regional economy, our team of experts have prepared a range of pertinent articles that provide insights into new laws, regulations, and the legal landscape in the Kingdom.
This edition will provide you with an up-to-date guide on matters such as; the framework issued by the Saudi Central Bank on IT governance, the anti-corruption landscape under Vision 2030; we also provide practical tips for dispute avoidance. This is only a snapshot; there are many more articles within the KSA focus section for you to read, which we hope you will find valuable and enjoyable.Read the edition
The Abu Dhabi Department of Health (“DoH”) has published a Circular (DoH Circular No. (71) of 2020) which states that it will be initiating an audit program to ensure that all healthcare entities in the Emirate of Abu Dhabi are complying with the Abu Dhabi Healthcare Information and Cyber Security Standards (“ADHICS Standards”).
DoH issued the ADHICS Standards on 3 February 2019 to ensure that the healthcare sector in Abu Dhabi harmonises its practices regarding privacy and information security to meet international standards and complement the Abu Dhabi Government’s Policy on the Healthcare Information Exchange (“HIE”) (dated 29/11/2018) to enhance the safety and security of health information.
Effectively there was a 12-month transition period to comply with the ADHICs standards.
The healthcare information and cyber security requirements within ADHICS Standards include standards for the following:
A significant control in the ADHICS Standards is Section CM 4.2 which provides that no healthcare entity can use cloud services or infrastructure to store, process or share information that contain the health information of a patient.
The control further states that healthcare entities must identify and disconnect integration of a system that processes, stores or utilises health information with any systems that connect or utilise cloud services and not share identified or de-identified health information with third parties, inclusive of counterparts and partners, unless authorised by the DoH.
The audit program will be undertaken by the Emirates Classification Society (TASNEEF) through their subsidiary TASNEEF-RINA Business Assurance (TRBA).
The audit program will be conducted in three year cycles, where in the first year of the cycle, there will be an audit conducted by TRBA to check for compliance with ADHICS, where a conformance certificate will be awarded.
In the second and third year of the cycle, there will be a surveillance audit to check for compliance with ADHICS, but no certification is provided for surveillance audits.
For more information regarding compliance with ADHICS Standards, Al Tamimi & Company’s Healthcare Sector and Technology, Media & Telecommunications teams regularly advise on laws and regulations impacting the healthcare sector. For further information please contact email@example.com.