Two emirates, two child protection regimes, two dates. Dubai requires a licensed specialist by 30 January 2027; Abu Dhabi has been in force since June 2026.
The DHA Standards for Child Protection and Reporting Child Abuse, DHA/HRS/HPSD/ST-42, were issued on 30 July 2026 and take effect on 30 January 2027. Every Dubai hospital providing paediatric care must assign a licensed Child Protection Specialist, other facilities serving children must appoint a Specialist or a Coordinator, and high-risk cases must be reported within 24 hours of suspicion. Abu Dhabi's Child Protection Policy has been effective since June 2026 and reaches volunteers, trainees and temporary staff. A group operating in both emirates is building to two different specifications on two different clocks.
What a board member needs before the next meeting on this.
- Dubai's clock runs to 30 January 2027. DHA/HRS/HPSD/ST-42 version 1 was issued on 30 July 2026 with an effective date of 30 January 2027 and a revision date of 30 July 2031. The six months between issue and effect are the build window, and roughly four of them remain.
- The Dubai requirement is a licensed post, not a nominated one. All hospitals providing medical care, preventive services, treatment and emergency services for paediatric patients shall assign a licensed Child Protection Specialist. Other facilities providing child services appoint either a Specialist or a Coordinator as appropriate.
- High-risk cases carry a 24-hour reporting clock. All suspected or confirmed high-risk cases must be reported immediately and no later than 24 hours from the time of suspicion or identification. A Specialist or Coordinator shall report suspected or confirmed abuse even without consent from the child's parent or guardian where the situation requires it.
- Abu Dhabi's policy reaches beyond payroll. DoH/Policy/CPP/ADPHC/V1/2026 applies to hospitals and clinics, healthcare professionals, social workers, administrative and support staff, volunteers and trainees, and states that temporary employees are fully subject to it including mandatory reporting, screening, training and codes of conduct.
On 31 July 2026 the Dubai Health Authority circulated its Standards for Child Protection and Reporting Child Abuse, version 1, under reference CIR-2026-00000113 (DHA circular CIR-2026-00000113). The standard carries code DHA/HRS/HPSD/ST-42, an issue date of 30 July 2026 and an effective date of 30 January 2027.
Six weeks earlier the Department of Health – Abu Dhabi had published its own Child Protection Policy, DoH/Policy/CPP/ADPHC/V1/2026, effective on publication in June 2026 (DoH Child Protection Policy). Any provider group with facilities in both emirates now has two obligations that overlap in intent and differ in structure, and only one of them is still ahead of it.
Dubai requires a licensed post to be filled
The Dubai standard's first section places the duty on the facility. All hospitals providing medical care, preventive services, treatment and emergency services for paediatric patients shall assign a licensed Child Protection Specialist. Other health facilities providing child services shall appoint either a Child Protection Specialist or a Child Protection Coordinator, as deemed appropriate. The word carrying the weight is licensed.
This is a role with a credential attached, and the market for people holding it in Dubai is thin. A facility that reads the requirement in December and starts recruiting will be hiring into a market where every other paediatric provider in the emirate is doing the same, with a licensing step standing between the offer and compliance. The build window opened on 30 July 2026 and closes on 30 January 2027, and roughly four months of it remain.
The written policy has a specified content
The standard requires each facility to hold a clear written child protection internal policy, and it dictates what that policy must contain. It must set out the course of action when abuse or neglect is suspected or discovered, in line with the standard and the legal mandate, so that managers, employees and healthcare professionals know how to protect the child and report the transgression.
It must identify the staff in charge, their functions, roles and responsibilities. And it must specify which positions are eligible to be assigned as the facility representative, together with their coverage when that person is away from duty. That last clause is the one most existing policies fail: a named individual with no deputy is a single point of failure on a duty that runs continuously.
The standard also requires that child protection information be clearly visible and accessible wherever children are received, naming clinic reception areas, paediatric wards, dental clinics and emergency departments. Dental practices in particular do not always regard themselves as paediatric facilities, and the standard does.
Twenty-four hours runs from suspicion
The reporting obligation is timed and the clock starts early. All suspected or confirmed high-risk cases must be reported immediately, and no later than 24 hours from the time of suspicion or identification. It runs from the moment a clinician forms a suspicion rather than from the moment a case is escalated internally, which is a materially different starting point in a facility whose escalation path passes through a manager who works weekdays.
The standard also provides that a Child Protection Specialist or Coordinator shall report any suspected or confirmed case of abuse even without obtaining consent from the child's parent or guardian, if the situation so requires. Any internal policy that conditions reporting on parental consent conflicts with the standard and needs rewriting before January.
Abu Dhabi is already live and its scope is wider
The Abu Dhabi policy took effect in June 2026, so a facility in that emirate is not preparing for a deadline; it is either compliant or it is not. Its applicability section reaches hospitals and clinics, healthcare professionals, social workers and child protection officers, administrative and support staff, and volunteers and trainees.
It states that temporary employees are fully subject to the policy, including mandatory reporting obligations, safeguarding standards, screening, training and codes of conduct, in the same manner as permanent employees. Groups that ran safeguarding training through the permanent payroll have a gap covering agency and locum staff.
The policy also routes notification specifically: on referral to the Child Protection Unit, the designated coordinator must notify the relevant authorities including the Family Care Authority and the Child Protection Center at Abu Dhabi Police. A group that has written one UAE-wide safeguarding procedure has written a procedure that names the wrong authority in one of the two emirates it operates in.
Four questions before the Dubai date
- Does the group employ anyone who can hold the licensed Child Protection Specialist post in each Dubai hospital treating children, or is that a recruitment with a licensing step in front of it?
- Does the written internal child protection policy name the individuals in charge, their roles, and who covers the Specialist or Coordinator when they are away from duty, as the standard requires?
- Can the group evidence a reporting route that meets 24 hours from suspicion, including out of hours and at weekends, rather than 24 hours from the case reaching a manager?
- In Abu Dhabi, do the screening, training and reporting obligations already extend to volunteers, trainees and temporary staff, or do they currently stop at permanent employees?
The Monday work is finite. Establish, facility by facility, who will hold the licensed Child Protection Specialist post in Dubai and whether that is an internal appointment or a recruitment with a licensing queue in front of it.
Rewrite the internal policy so it names the role holder, the deputy and the out-of-hours route, and so that reporting is not conditioned on parental consent. Then check whether the Abu Dhabi sites already extend screening and training to volunteers, trainees and temporary staff. That operational and compliance build is where our operational excellence practice begins.
This brief covers one instrument. The UAE healthcare regulatory tracker carries the full set — DoH, DHA, EDE and the other emirates — with what each one changes and when it takes effect.
Subscribe
The UAE healthcare regulatory briefing
What changed, what it reprices, and the instrument to read. Every second Tuesday. No pitches.
One email a fortnight. Unsubscribe from any of them.