Medical Record Privacy Explained matters every time you visit a hospital, clinic, or laboratory in the UAE. Your records hold details most people would never share openly — diagnoses, test results, prescriptions, mental health notes, and sometimes information about your family. So it is worth understanding exactly who can see those details, who cannot, and what rules hospitals must follow before sharing them.
The UAE takes patient confidentiality seriously. Federal health laws, plus regulations from each emirate’s health authority, place strict limits on how medical records are stored, shared, and accessed. This guide explains those rules in plain language: what is protected, who gets access, how consent works, and what you can do if your privacy is violated.
Quick Answer
In the UAE, your medical records are confidential by law. Hospitals and clinics cannot share them with employers, insurers, family members, or third parties without your clear consent, except in narrow situations defined by law — such as court orders, certain public health reporting, or medical emergencies where you cannot consent. You have the right to know who has accessed your records, to give or refuse consent, and to complain to the health authority if a provider breaks the rules.
Who Owns Your Medical Records in the UAE
This is the first thing to get straight. The hospital or clinic that created your medical records is responsible for keeping them safe, but the information in them is about you — and UAE regulations treat you as the patient with rights over that information. The facility is the custodian; you are the person the privacy protections exist for.
In practice this means:
- You can request to see and receive copies of your records — see our guide on how to request access to medical records for the exact steps.
- The facility must keep your records secure, both in paper files and electronic systems.
- Staff who are not involved in your care generally have no right to open your file.
What Confidentiality Actually Covers
Confidentiality is not limited to your diagnosis. It covers everything recorded during your care, including:
- Diagnoses, symptoms, and treatment plans.
- Laboratory results, imaging, and pathology reports.
- Prescriptions and medication history.
- Mental health and counselling notes.
- Sexual and reproductive health information.
- Anything you told a doctor in confidence during a consultation.
It also covers the simple fact that you are a patient at a particular facility. A receptionist or staff member should not confirm to a stranger that you are being treated there, let alone discuss why.
Who Can Access Your Records (and Who Cannot)
Access to medical records in the UAE follows a simple principle: only people who need the information to care for you, or whom you have authorised, may see it. The table below summarises the common situations.
| Person or entity | Can they access your records? |
|---|---|
| The doctors and nurses treating you | Yes — access is limited to your care team. |
| You, the patient | Yes — you have the right to request copies of your records. |
| Your spouse or adult family members | Only with your consent, unless you cannot consent and they are acting in your interest. |
| Your employer | No — employers cannot request your medical file; at most they may receive a fitness-to-work certificate you provide yourself. |
| Your health insurer | Only with your consent, usually given when you sign the insurance policy or a claim form. |
| Other hospitals (for referrals) | Yes, when a referral requires your records to be shared for continued care. |
| Courts and law enforcement | Only under a court order or where the law specifically requires disclosure. |
If you ever need a copy of your file for a new doctor or a visa medical review, follow the steps in how to get a copy of a medical record rather than letting anyone pressure you into handing over more than is necessary.
Your Consent: How It Works in the UAE
Consent is the mechanism that controls most sharing of your records. When you sign an insurance policy in the UAE, for example, it typically includes a clause authorising the insurer to request records related to your claims — this is why your health insurance provider can verify a treatment before paying. Read what you sign: consent forms sometimes authorise broader access than you expect.
A few points worth knowing about consent:
- Consent should be specific and informed — you should understand what is being shared, with whom, and why.
- You can ask a hospital to explain a consent form before you sign it.
- For sensitive categories of information, providers are expected to be especially careful about what they disclose and to whom.
- You can generally withdraw or limit consent for future sharing, though records already shared cannot be taken back.
Digital Records and Portal Privacy
Most UAE hospitals now keep electronic records, and many offer patient portals or apps where you can view results, prescriptions, and visit summaries. This is convenient, but it puts the responsibility for login security partly on you.
- Use a strong, unique password for any hospital portal or health app, and turn on two-factor authentication where available.
- Do not stay logged in on shared or public computers.
- Be careful with family sharing: if your app shows a child’s records linked to your account, anyone with your login sees them too.
Keeping your own secure copies is smart too — our guide on how to keep digital medical records walks through safe storage options.
On the regulatory side, the UAE’s health authorities set the data protection standards that licensed facilities must follow. The Ministry of Health and Prevention (MOHAP) oversees health services at the federal level, while emirate authorities such as the Dubai Health Authority (DHA) regulate providers in their jurisdictions. Licensed facilities are expected to restrict staff access, log who opens patient files, and report breaches.
Medical Record Privacy Explained for Children and Dependents
For children under the age of legal majority, a parent or legal guardian normally acts on the child’s behalf — requesting records, giving consent, and receiving results. Once a child becomes an adult, that default access ends and the young adult’s own consent is required, even for parents. If you are managing care for an elderly parent who can no longer make decisions, the hospital may ask for proof of guardianship or a power of attorney before releasing records to you.
What Happens If Your Privacy Is Breached
If you believe a hospital, clinic, or staff member shared your medical information without authorisation, you are not without options:
- Complain to the facility first. Ask for the hospital’s patient relations or complaints department and put your complaint in writing, noting dates and what was disclosed.
- Escalate to the health authority. If the facility does not resolve it, file a complaint with the health authority that licenses the provider — MOHAP, DHA, or the Department of Health – Abu Dhabi, depending on the emirate.
- Keep your own evidence. Save copies of messages, emails, and any documents related to the breach.
Breaches of medical confidentiality can carry serious consequences for the provider, including fines and licence action, which is why most facilities treat these complaints seriously.
How to Protect Your Own Records Day to Day
Regulations protect you, but a few habits make a real difference:
- Share only the specific reports a situation requires — a sick-leave certificate for your employer, not your full file.
- Read insurance and employer health forms carefully before signing consent clauses.
- Ask who will see a report before it is sent anywhere.
- Keep your Emirates ID and insurance card safe, since both are commonly used to identify you when records are accessed. If your ID details change, see UAE Emirates ID renewal to keep your records matched to the right identity.
Frequently Asked Questions (FAQs)
Can my employer in the UAE see my medical records?
No. Employers have no right to your medical file. They may ask you to provide a fitness certificate or sick-leave note, which you obtain yourself — they cannot contact your hospital directly for your records without your consent.
Can my health insurer access my records without my permission?
Insurers generally access records only with your consent, which you typically give when signing the policy or submitting a claim. If you are unsure what you agreed to, check your policy documents — and review the requirements for employees in our guide to Dubai health insurance requirements.
Do UAE hospitals share patient data with government authorities?
Hospitals may be required to report certain notifiable diseases to public health authorities — this is a standard public-health measure worldwide. Beyond these defined reporting duties and court orders, providers may not hand your records to government bodies.
Can I find out who has accessed my medical records?
You can ask the facility for an access log of your file. Electronic record systems typically record which staff members opened a patient’s records and when, and patients can raise questions about access that looks unrelated to their care.
Can I stop a hospital from sharing my records with another hospital?
Sharing for a referral or continued treatment is considered part of your care. If you object to a specific transfer, discuss it with your doctor — but refusing all sharing can affect the quality of care you receive, since the next doctor needs your history.
The Bottom Line
Medical record privacy in the UAE rests on a clear rule: your health information stays confidential unless you consent to share it or the law specifically requires disclosure. Know who is allowed to see your records, read consent forms before signing, secure your patient portal logins, and do not hesitate to complain to the facility or the health authority if your privacy is breached. Your records are about you — you get to control who sees them.
Last Updated: 8 October 2026
About the author: Zaviyar Sultan is a UAE-focused writer at Paxi, covering driving, visas, banking, insurance and everyday UAE life. His guides are researched from official UAE government and regulator sources and updated regularly.
Paxi is an independent informational website, not affiliated with the UAE government or any agency mentioned; content is general information only, not legal, immigration or financial advice; verify critical details with official sources before acting.