UAE DHA compliance for healthcare AI —
enforced on every LLM call.
Dubai's healthcare AI requires licensed clinician oversight for diagnosis, prohibits AI prescription advice, and bans false regulatory approval claims. LLMs violate all three without guardrails. Peekr enforces DHA rules in-process before responses reach patients — no proxy, no architecture change.
Why UAE DHA on LLM outputs is hard
AI diagnoses without a licensed doctor
"Based on your symptoms, you likely have Type 2 Diabetes." The DHA requires all medical diagnoses to be made or supervised by a licensed healthcare professional. AI-generated diagnoses without clinical oversight are prohibited regardless of accuracy.
LLMs give prescription advice
A user describes symptoms and the LLM recommends a specific medication and dosage. Under Dubai healthcare law, prescriptions require a licensed physician. An AI that substitutes for that process creates both patient safety and regulatory risk.
False DHA approval claims
"Our AI health tool is DHA-approved." Without an official DHA approval certificate, claiming regulatory endorsement is a false marketing statement. LLMs trained on promotional content can repeat these claims confidently — Peekr catches them before they go live.
What Peekr enforces
The UAE DHA pack runs as a guardrail inside your agent process. Every LLM response is checked before it reaches the patient or user. Violations are blocked (or warned) and stored in an immutable audit log.
| Category | What it catches | Action |
|---|---|---|
| AI medical diagnosis | "You have [condition]", "this is likely [disease]", "your symptoms indicate" | Block — requires licensed DHA clinician |
| Prescription advice | Specific drug + dosage recommendation for a named condition or user | Block — prescription requires licensed physician |
| False DHA approval | "DHA-approved", "approved by Dubai Health Authority" without official approval | Block — false regulatory claim |
| Missing clinical disclaimer | Health information response without referral to licensed healthcare professional | Warn — add required disclaimer |
2 lines to enforce UAE DHA
Add compliance=["UAE_DHA"] to your existing peekr.instrument() call. Rules are fetched from Peekr Cloud and enforced locally — no data leaves your process.
import peekr
peekr.instrument(
exporter=peekr.HTTPExporter(
endpoint="https://peekr.starkspherelabs.com",
api_key="pk_live_...",
),
compliance=["UAE_DHA"], # ← add this line
)
# Every LLM call is now UAE DHA-checked.
# Diagnoses are blocked. Prescription advice is blocked.
# Violations go into an audit log your compliance officer can read.Works with OpenAI, Anthropic, Google Gemini, Amazon Bedrock, LangChain, and CrewAI — auto-instrumented, no code changes per call.
Audit-ready violation logs
Every violation is stored as a tamper-evident record in Peekr Cloud: which rule fired, which text triggered it, which model produced it, and when. Your compliance team can filter by regulation and present logs to the DHA or Dubai Healthcare City Authority.
Per-violation detail
Pack, rule name, matched text, span ID, timestamp, tenant.
Clinical team access
Compliance officer or medical director gets read-only dashboard access, no code required.
7-day rolling window
Default retention. Enterprise gets configurable retention + export.
Immutable records
Violations can't be deleted by the app — only by explicit data retention policy.
Common questions
What is the Dubai Health Authority (DHA)?
The Dubai Health Authority is the regulatory body for the healthcare sector in the Emirate of Dubai, responsible for licensing healthcare professionals and facilities, setting clinical standards, and approving health technology products. AI health applications targeting Dubai residents must comply with DHA regulations and, where applicable, obtain DHA approval.
Does Dubai require AI medical disclaimers?
Yes. DHA regulations require that digital health applications clearly disclose that AI-generated health information does not constitute a medical diagnosis or replace advice from a licensed healthcare professional. Applications that omit this disclaimer risk non-compliance with DHA's digital health framework.
How is UAE DHA different from HIPAA?
HIPAA (US) focuses primarily on the privacy and security of Protected Health Information. UAE DHA focuses on the licensing of healthcare providers, clinical standards for digital health tools, and the scope of practice for AI in clinical settings. A Dubai-based health app may need to comply with both if it handles data from US residents or partners with HIPAA-covered entities.
What counts as a medical device in UAE?
Under UAE Federal Law No. 4 of 1983 and subsequent regulations, software that claims to diagnose, monitor, treat, or prevent a disease or condition may be classified as a medical device requiring registration with the UAE Ministry of Health or the DHA. AI diagnostic tools are increasingly subject to medical device classification, which Peekr helps you stay out of by blocking diagnostic outputs.
Can AI apps give health information in Dubai?
Yes, with limitations. General health information and wellness guidance is permissible. What is prohibited without licensed clinician oversight is: medical diagnosis, specific prescription advice, claims of DHA approval without a certificate, and content that could be interpreted as substituting for a clinical consultation. Peekr's DHA pack blocks the prohibited categories and flags missing disclaimers on the permissible ones.
Start enforcing UAE DHA on your healthcare AI today
Free tier includes the UAE DHA pack — 10,000 spans/month, no credit card.
Also need HIPAA, UAE PDPL, or UAE CBUAE? See all 10+ compliance packs →