Dubai Health Authority Circular No. DHA/HRS/HISHD/HIACP/1/2021

Policy for Health Information Assets Classification

Ownership: Health Regulation Sector

Applicability: All Healthcare Entities under the Jurisdiction of Dubai Health Authority

1 - Purpose

1.1. To set out Dubai Health Authority (DHA) `s requirements for Classifying Health Information Assets (HIA) in the Emirate of Dubai, in line with the UAE and Emirate of Dubai legislative, regulatory frameworks, and necessities.

1.2. To outline the requirements and responsibilities of healthcare Entities working under jurisdiction of DHA on HIA classification.

1.3. To ensure that the applicable and relevant security controls are set in place for HIA in line with relevant UAE and Emirate of Dubai legislative and regulatory requirements.