Telemedicine Licensing in the GCC: How to Legally Practice Virtual Care in UAE & Saudi Arabia (2026)

Telemedicine has moved from a pandemic-era workaround to a permanent pillar of healthcare delivery across the GCC. Governments in the UAE and Saudi Arabia have responded with detailed regulatory frameworks that impose real legal obligations on every practitioner who consults, diagnoses, or prescribes remotely. Ignorance of these rules is not a defence — and the consequences of non-compliance range from license suspension to criminal liability under medical liability laws.

Yet most resources on GCC telemedicine focus on the business and technology angles: data centres, app development, investment opportunities. Very little guidance exists for the individual doctor, nurse, or allied health professional asking the practical question: what do I need to legally see a patient over video?

This guide fills that gap. It maps the UAE and Saudi Arabian regulatory frameworks specifically from the practitioner's perspective, explaining which laws apply, what your facility must do, what you must do personally, and where the rules are still evolving. Whether you are based in Dubai, Abu Dhabi, Riyadh, or abroad and want to consult GCC patients, this is your starting point.

For a full picture of the underlying medical licensing requirements that apply before any telemedicine endorsement becomes relevant, see our complete guide to UAE medical licensing.

The UAE has layered its telemedicine regulation across three primary instruments, each addressing a different dimension of virtual care. Understanding all three is essential because they interact — a breach in one area can trigger liability under another.

Federal Law No. 4 of 2015 — Medical Liability

This law establishes the foundational standard of care that applies to all medical practice in the UAE, including remote consultations. It defines medical error, sets out disciplinary processes, and creates civil and criminal liability for practitioners. Crucially, the law does not distinguish between in-person and remote care: if you consult a patient via video and that consultation falls below the required standard, you are subject to the same liability as if the patient were sitting in your clinic. This means documentation of telemedicine consultations must meet the same rigorous standards as face-to-face encounters.

Federal Law No. 2 of 2019 — Use of ICT in Health

This is the primary telemedicine-specific legislation at the federal level. It establishes the legal basis for ICT-enabled health services, sets out the duties of health facilities offering remote services, and empowers the Ministry of Health and Prevention (MOHAP) to issue implementing regulations. The law requires that telemedicine services be provided through licensed health facilities — individual practitioners cannot operate independently outside a licensed facility framework. This single requirement has significant practical implications that many clinicians overlook.

Cabinet Decision No. 40 of 2019 — National Telemedicine Guidelines

This Cabinet Decision translates the principles of Federal Law No. 2 into operational requirements. It covers: approved service categories (teleconsultation, telediagnosis, telemonitoring, and teleconsultation for prescription issuance); technical infrastructure standards including encryption protocols and data residency; informed consent procedures specific to telemedicine; documentation and record-keeping obligations; and cross-emirate service considerations. Practitioners operating in Dubai or Abu Dhabi must also comply with emirate-level guidelines issued by the DHA and DOH respectively, which build on and sometimes exceed the federal baseline.

One of the most common misconceptions among GCC-bound practitioners is that telemedicine requires a separate, standalone license. In the UAE, this is not the case. Your existing professional license — whether issued by MOHAP, DHA, or DOH — covers telemedicine activity, provided one critical condition is met: the health facility through which you practise must hold the appropriate telemedicine authorisation or endorsement from its regulator.

This means the compliance burden is shared between practitioner and facility, but the practitioner cannot simply assume the facility has done its part. Before conducting any remote consultation, you should verify in writing that your employing or contracting facility:

• Holds a valid facility license that explicitly covers telemedicine or e-health services
• Has implemented the technical requirements mandated by Cabinet Decision No. 40 of 2019 (end-to-end encryption, multi-factor authentication for both practitioner and patient login, and use of regulatory-approved communication platforms)
• Has a documented telemedicine policy that has been reviewed by the relevant emirate regulator
• Maintains a telemedicine-specific consent process and can demonstrate patient consent records upon audit

If you practise across multiple emirates — for example, you are DHA-licensed in Dubai but consult patients in Abu Dhabi via video — the cross-emirate rules matter. As of 2026, cross-emirate telehealth policy is still evolving, but the working principle is that the patient's location determines which emirate authority's rules govern the consultation. Practitioners in this situation should seek written guidance from both relevant regulators. Our team at Neelim regularly assists clinicians navigating multi-emirate scenarios; see also our breakdown of DHA vs DOH vs MOHAP licensing differences.

The practical upshot: if you are joining a telehealth platform or digital health startup as a consulting physician, due diligence on the platform's regulatory status is not optional — it is your professional and legal responsibility.

Cabinet Decision No. 40 of 2019 and subsequent MOHAP circulars set out specific technical standards that go beyond simply having a stable internet connection. Practitioners practising telemedicine in the UAE must be aware of these requirements even if the primary compliance obligation falls on the facility, because operating through a non-compliant system exposes the individual practitioner to regulatory risk.

Approved Communication Tools

Regulators do not publish an exhaustive approved-platform list, but they are clear that consumer-grade applications (WhatsApp, standard FaceTime, unencrypted Zoom sessions) do not meet the regulatory standard for clinical consultations. Compliant platforms must provide end-to-end encryption, an auditable consultation record, and integration with the facility's electronic health record system. Many UAE-based telehealth companies have built proprietary platforms specifically to meet these requirements.

Multi-Factor Authentication

Both the practitioner and the patient must authenticate their identity before a clinical session begins. For practitioners this typically means a combination of their professional login credentials and a time-limited OTP. For patients, identification is commonly verified against Emirates ID data. This requirement is particularly relevant for prescription issuance — remote prescriptions are only legally valid if the identity verification chain is intact and documented.

Data Residency and Patient Records

Health data generated in the UAE must be stored on servers located within the UAE or in approved jurisdictions under UAE data protection law. This has practical implications for international telehealth platforms operating in the UAE market. For practitioners, the key obligation is to ensure that consultation notes, images, and diagnostic data are recorded in the facility's compliant EHR rather than on personal devices or cloud accounts not governed by UAE data law.

Prescription Issuance via Telemedicine

Remote prescription is permitted under the UAE framework but is the area most tightly regulated. The consultation must meet a minimum clinical standard (the practitioner must have an established therapeutic relationship with the patient or access to sufficient prior clinical information), and prescriptions must be issued through a system that links to the Ministry of Health's prescription database where applicable. Controlled substances cannot be prescribed via telemedicine without prior in-person assessment.

A significant development for practitioners seeking licensure in Dubai is that the DHA licensing examination now includes telemedicine-related competencies in its assessed domains. This reflects the DHA's position that virtual care is no longer a specialised add-on but a core clinical skill that all licensed practitioners must demonstrate understanding of.

The telemedicine competency domains tested in DHA examinations include: understanding of the UAE legal framework governing remote care; recognition of the clinical scenarios where telemedicine is appropriate versus where in-person assessment is mandatory; informed consent processes specific to virtual consultations; data security obligations; and professional standards for documentation of remote encounters.

This means candidates preparing for DHA licensure should not limit their study to clinical topics alone. Regulatory literacy — specifically around telemedicine law — is now examinable material. Candidates who have worked in jurisdictions where telemedicine is loosely regulated may need to specifically study the UAE's more structured approach before sitting the exam.

For a detailed breakdown of the DHA examination process, fee structures, and eligibility criteria, see our DHA license Dubai requirements guide. Our consultants can also help you identify which specific competency domains require the most preparation based on your clinical background.

Saudi Arabia formalised its telemedicine regulatory framework in 2019 through the Ministry of Health, making it one of the earlier GCC nations to establish a comprehensive legal basis for virtual care. The Saudi framework shares structural similarities with the UAE approach — no separate standalone license, facility-based authorisation, and technical minimum standards — but has some distinct features that practitioners must understand.

MOH Telemedicine Regulations

The MOH regulations define telemedicine services across four categories: teleconsultation (real-time video consultation between patient and provider); telemonitoring (remote collection and review of patient health data); teleradiology and telepathology (remote review of diagnostic images); and store-and-forward services (asynchronous review of clinical information). Each category has slightly different requirements regarding consent, documentation, and the circumstances under which it is permissible as the sole basis for a clinical decision.

SCFHS License as the Foundation

Like the UAE, Saudi Arabia does not require practitioners to obtain a separate telemedicine license. Your Saudi Commission for Health Specialties (SCFHS) license remains the foundation. What is required is that the facility at which you are credentialled has registered its telemedicine services with the MOH and meets the platform and infrastructure standards specified in the regulations. For a comprehensive overview of SCFHS licensing requirements and timelines, see our SCFHS licensing guide.

Regulatory Sandboxes and Innovation

Saudi Arabia has taken a notably progressive stance on healthcare technology innovation by establishing regulatory sandboxes that allow startups to test AI-powered diagnostic tools and novel telehealth solutions within a supervised regulatory environment. This does not create a separate licensing pathway for individual practitioners, but it does mean the regulatory landscape in Saudi Arabia is actively evolving, with new guidance issued periodically as sandbox-tested approaches are mainstreamed. Practitioners working with digital health companies in Saudi Arabia should ensure their employment agreements include provisions for regulatory updates, as compliance obligations can change within a single contract period.

An increasingly common scenario involves practitioners licensed in one country wanting to consult patients located in the UAE or Saudi Arabia remotely. This is one of the most legally ambiguous areas of GCC telemedicine regulation, and the current state of the rules rewards caution.

The prevailing regulatory position in both the UAE and Saudi Arabia is that the location of the patient determines which jurisdiction's rules apply. A physician licensed in the UK who consults a patient sitting in Dubai is, from the UAE regulator's perspective, providing healthcare services in Dubai — and should therefore be licensed to practise in Dubai (or operating through a licensed UAE facility that holds appropriate telemedicine authorisation).

In practice, enforcement against overseas practitioners consulting individual patients informally is inconsistent. However, the risk calculus changes significantly for:

• Practitioners operating at scale through a platform marketed to UAE or Saudi patients
• Any situation involving prescription issuance to GCC-based patients
• Practitioners employed by a GCC-headquartered company, even if physically based abroad
• Situations where a clinical adverse event occurs and regulatory scrutiny follows

For practitioners who regularly consult GCC patients from abroad and want to do so with full legal clarity, the cleanest approach remains obtaining the relevant GCC license and ensuring the platform through which they operate holds the necessary facility authorisation. Our team at Neelim specialises in helping internationally-based practitioners understand and navigate this process efficiently. The GCC licensing timeline guide sets realistic expectations for how long this process takes.

Drawing together the requirements across both jurisdictions, the following checklist covers the minimum steps every practitioner should take before conducting telemedicine consultations in the UAE or Saudi Arabia.

1. Verify your primary license is active and in good standing — telemedicine activity does not suspend standard license obligations; any conditions or restrictions on your license apply equally to remote practice.
2. Confirm your facility's telemedicine authorisation in writing — request documentation from your facility's compliance team confirming the regulator has been notified of or has approved the facility's telemedicine programme.
3. Review the platform for technical compliance — if the platform is provided by your employer, ask for the compliance documentation; if you are selecting your own tool, verify it meets encryption and authentication standards.
4. Ensure your informed consent process is telemedicine-specific — generic consent forms do not satisfy the specific requirements of Cabinet Decision No. 40 or MOH telemedicine regulations. The consent must explicitly address the remote nature of the consultation, data recording, and the limitations of virtual assessment.
5. Establish your documentation protocol — telemedicine consultations must be documented to the same standard as in-person encounters. Set up your workflow so that notes are captured in the compliant EHR during or immediately after each session.
6. Understand which clinical scenarios require in-person referral — regulators in both jurisdictions identify categories of clinical situation where telemedicine is not appropriate as the sole modality. Familiarise yourself with these boundaries and have a clear referral pathway for patients who need face-to-face assessment.
7. Check cross-emirate or cross-border applicability — if your patients may be located in a different emirate from where you are licensed, or in a different country, take specific advice on whether additional authorisation is needed.

This checklist is a starting point. The regulations in both countries are being actively updated, and practitioners should build a habit of reviewing MOHAP, DHA, DOH, and MOH communications for new circulars relevant to telemedicine.

Telemedicine regulation in the GCC is not static. Several significant developments are underway that practitioners should monitor as they plan their careers in virtual care.

AI-Assisted Diagnostics Integration

Both the UAE and Saudi Arabia are grappling with how to regulate AI diagnostic tools used within telemedicine consultations. The Saudi regulatory sandbox approach is likely to produce formal guidance within the next 12–18 months. The UAE has indicated through MOHAP and the health regulators in free zones (DHCA, CPHQ) that AI tools used in clinical decision-making must be validated and disclosed to patients. Practitioners using AI-assisted tools in their virtual practice should document the role of AI clearly in clinical records.

Cross-GCC Mutual Recognition

GCC countries have been moving — slowly — towards mutual recognition frameworks that could simplify cross-border telemedicine. While a formal unified telemedicine licensing treaty does not yet exist, the Gulf Health Council has produced recommendations that individual countries are incorporating at different speeds. This is an area where the regulatory landscape could shift materially by late 2026.

Mental Health Telemedicine

Mental health services via telemedicine are subject to additional scrutiny in both the UAE and Saudi Arabia, reflecting the sensitive nature of the specialty and the heightened data privacy considerations. Practitioners in psychiatry, psychology, and counselling should check for specialty-specific telemedicine guidance from their licensing authority, as the general framework may be supplemented by mental health-specific rules.

Keeping pace with these changes is one of the core services Neelim provides. Our regulatory monitoring service alerts licensed practitioners when new rules affecting their practice are issued.

Neelim has built its reputation on one insight: getting a GCC healthcare license is complex enough, but understanding how that license applies to the rapidly evolving world of telemedicine is an additional layer of complexity that most practitioners are not resourced to navigate alone. Our consultants combine deep knowledge of UAE and Saudi regulatory frameworks with hands-on experience supporting practitioners at every stage of the licensing and compliance journey.

What We Do

• Telemedicine readiness assessments — we review your current license status, planned practice model, and the regulatory obligations that apply, and produce a clear action plan for achieving full compliance.
• Facility vetting support — before you join a telehealth platform or digital health company, we help you ask the right questions and review their regulatory documentation so you are not unknowingly practising through a non-compliant structure.
• Cross-emirate and cross-border guidance — we provide written assessments for practitioners whose practice model spans multiple jurisdictions, giving you a defensible record of having taken appropriate regulatory advice.
• DHA exam preparation support — our exam coaching includes the telemedicine competency domains that are now assessed in DHA examinations, ensuring candidates are not caught out by regulatory knowledge questions.
• Ongoing regulatory monitoring — our clients receive alerts when MOH, MOHAP, DHA, or DOH publish new guidance affecting telemedicine practice.

Whether you are a clinician joining a UAE telehealth startup, a Saudi-based physician expanding into virtual consultations, or an internationally-based practitioner wanting to legally consult GCC patients, we can map the exact path from your current position to full compliance. Contact the Neelim team to arrange an initial consultation — and take the guesswork out of practising virtual care legally in the GCC.