Dubai has dated its new clinical-research rulebook, and the compliance clock runs out on 1 January 2027.
DHA/HRS/MERD/ST-02 was issued on 30 April 2026 and comes into force on 1 January 2027. Sponsors, CROs, hospitals and clinics with Dubai trial revenue have fifteen months to sit under DSREC ethics oversight, hold PIs to ICH E6 (R2) refresh cycles, keep genomic data inside the UAE and — for interventional trials — supply the product free of charge.
What a board member needs before the next meeting on this.
- The rule is dated, not live. DHA/HRS/MERD/ST-02 Version 1 was issued 30 April 2026 and becomes effective 1 January 2027. A deal closing before that date treats it as a covenant and a remediation cost, not a breach.
- The scope pulls in every party in the trial ecosystem. Every UAE-licensed health professional, DHA-licensed provider, educational institution and pharmaceutical firm conducting clinical research on human subjects in Dubai sits under Standard §4.1.
- Genomic data has to stay inside the UAE. Standard Twelve keeps storage inside the country, prohibits outsourcing genomic data or analysis abroad, and confines cloud storage to DHA-vetted services.
- Interventional trials come with a free-supply obligation. Section 5.12 requires the sponsor of an interventional trial to supply the tested medicinal product and all articles required for its administration free of charge — a line that reprices sponsor-recovery clauses in existing Clinical Trial Agreements.
The Dubai Health Authority has issued its first standards for clinical research. DHA/HRS/MERD/ST-02 Version 1 carries an issue date of 30 April 2026 and an effective date of 1 January 2027, and was transmitted to Dubai's clinical-trial community by external circular CIR-2026-00000101 on 21 July 2026 (DHA Sheryan portal, circular CIR-2026-00000101). The gap of fifteen months between issue and effective date is doing all the work in this brief.
There are two ways to read the standard. As a live rule, it changes nothing today. As a dated obligation, it turns every interventional and non-interventional trial in Dubai — outside gene therapy, Phase I CTIMPs and animal-only research — into a compliance workstream that has to land before the first working week of 2027 (Standards §2.2, §4). For a deal closing before 1 January 2027, that is a covenant and a remediation cost. For a deal closing after, it is a licence-level exposure and needs to be priced as one.
EVERY PARTY IN THE TRIAL ECOSYSTEM IS INSIDE THE SCOPE
Section 4.1 names UAE-licensed health professionals, DHA-licensed healthcare providers, educational institutions, pharmaceutical firms and any facility conducting clinical research on human subjects in Dubai. Section 5.9 requires the sponsor to be a legal entity established in the UAE or a duly licensed, legally authorised representative acting on their behalf. Section 5.11 requires every CRO engaged in a Dubai trial to hold a valid UAE licence and registration. A global sponsor running Dubai sites through an offshore holding company and a foreign CRO has, on 1 January 2027, a corporate-structure question, not a paperwork one.
THE ETHICS COMMITTEE ARCHITECTURE IS CENTRAL AND LOCAL
Standard Four sets the Dubai Scientific Research Ethics Committee (DSREC) as the central ethics committee for the Emirate, with Local Ethics Committees (LECs) sitting at the institution level and reporting into it. Interventional trials need four things before they can start under Standard Five: a positive LEC opinion, a final positive DSREC opinion, a written approval from the Regulatory Committee at MOHAP, and an EDE import licence. Non-interventional trials need the LEC and DSREC opinions only. The DSREC review clock is 60 calendar days for interventional trials and 45 calendar days for non-interventional (Standard Seven), pausable when the committee asks for information and terminated if the sponsor does not respond within 60 calendar days. That is the planning input for anyone budgeting Dubai trial timelines in 2027.
INTERVENTIONAL TRIALS COME WITH A FREE-SUPPLY OBLIGATION
Section 5.12 requires the sponsor of a trial with an interventional design to supply the tested medicinal product and all articles required for its administration free of charge. One sentence in the standard, a material line in a Clinical Trial Agreement. A CTA signed in 2026 that priced sponsor recovery for product supply against a 2027 budget needs to be re-read against 5.12 before 1 January 2027; a target relying on that recovery has a mispriced revenue line until it is rewritten. Sponsor and PI must also carry local insurance covering liability to trial subjects (§5.6), with §§5.7–5.8 splitting the liability between them depending on whether the protocol was followed.
THE GENOMIC-DATA RULE IS THE ONE MOST BUYERS UNDERWEIGHT
Standard Twelve keeps genomic data storage inside the UAE, prohibits outsourcing genomic data or analysis abroad, permits only DHA-vetted cloud services, and imports Federal Law by Decree No. (49) of 2023 on the Human Genome as the ceiling above which UAE Genome Programme data may not be published without ministerial approval. For a target running Dubai genomics through an EU or US analysis vendor, that is a supply-chain change on a fixed date. It is also the least visible line in a data room. Reading the trial-level SOPs against §16.2 in advance is how the diligence question becomes a remediation task rather than a repricing event.
COMPASSIONATE USE AND SAFETY REPORTING ARE TIMED
Compassionate use requires two independent physicians to sign off if immediate use is required to preserve the subject's life, with retrospective review by a non-participating physician inside 5 working days and documentation to DSREC within the same window (§§6.12–6.13). Fatal or life-threatening SUSARs go to DSREC within 5 working days; other SUSARs within 15 working days; annual reports on all SUSARs and Investigator's Brochure updates follow (Standard Ten). None of these clocks is negotiable, and every one of them is something a diligence exercise can sample against the last twelve months of trial records to establish whether the target is likely to clear compliance on time.
Four questions before a Dubai target's next clinical-trial covenant negotiation
- Which live protocols have PI GCP training current within the ICH E6 (R2) three-year refresh cycle, and where does the gap become visible on 1 January 2027?
- Is our genomic-data flow entirely within the UAE, on a DHA-vetted cloud, and can we prove it in a diligence data room today?
- For each interventional protocol, are we compliant with the free-supply obligation under §5.12, and what does that do to sponsor-recovery clauses in our existing CTAs?
- Is our sponsor a UAE-established legal entity or a duly licensed representative under §5.9 — and if not, what does the corporate reorganisation cost?
The Monday work is finite. Read the effective date as 1 January 2027, not "now". Sit the sponsor entity and the CRO licensing structure against §§5.9 and 5.11. Sit each live interventional protocol against §5.12 and re-read the Clinical Trial Agreement. Trace the genomic-data flow against §16.2 and confirm it can be brought inside the UAE by the end of Q4 2026. That regulatory and diligence work is where our market access and regulatory practice begins.
This brief covers one instrument. The UAE healthcare regulatory tracker carries the full set — DoH, DHA, EDE and the other emirates — with what each one changes and when it takes effect.
Subscribe
The UAE healthcare regulatory briefing
What changed, what it reprices, and the instrument to read. Every second Tuesday. No pitches.
One email a fortnight. Unsubscribe from any of them.