GCC regulations / Law or regulation

Abu Dhabi Healthcare Information and Cyber Security Standard (DoH)

Mandatory information and cyber security standard for healthcare entities licensed by the Abu Dhabi Department of Health.

The Department of Health – Abu Dhabi requires licensed healthcare entities to comply with ADHICS, which defines governance, risk management and control requirements to protect health information and healthcare systems, with compliance levels scaled by entity size and risk.

We run ADHICS gap assessments, implement controls, prepare for compliance audits and integrate the programme with ISO 27001 and ISO 27799.

Who it is for

  • Hospitals, clinics and pharmacies in Abu Dhabi
  • Health-tech and service providers to DoH-licensed entities

What you gain

  • Licence-supporting compliance
  • Protected patient data
  • Controls reusable for ISO 27001

How we get you compliant

  1. Applicability and scoping

    Confirm whether and how the law applies to you, entities, data, systems, roles and territories.

  2. Data and process mapping

    Build a record of processing or control inventory so obligations can be tied to real systems and owners.

  3. Gap assessment

    Measure current practice against each obligation and rank the gaps by legal and business risk.

  4. Remediation roadmap

    Policies, notices, contracts, technical controls and governance, sequenced so the highest risks close first.

  5. Evidence and ongoing monitoring

    A compliance calendar, metrics and periodic reviews so you can demonstrate compliance to a regulator or customer at any time.

ADHICS questions

Is ADHICS mandatory?
Yes, for healthcare entities licensed by the Department of Health – Abu Dhabi, with requirements scaled by entity category.

Ready to start on ADHICS?

Tell us which standard or customer requirement you are facing. In a free 30-minute call we will outline the gaps, a realistic timeline and what it will take to be audit-ready.