SaMD Regulation in the UAE: A Quick Guide

Summary

Software as a Medical Device (SaMD) is regulated under Federal Decree-Law No. 38 of 2024 in the UAE, overseen by the Emirates Drug Establishment (EDE).

• Digital health software that diagnoses, treats, or monitors medical conditions requires regulatory approval
• SaMD is classified into four risk categories, each with different approval requirements
• Marketing approval requires documentation, international compliance standards, and selection of a local representative

What is a SaMD?

SaMD refers to software that performs medical functions like diagnosis, monitoring, or treatment guidance without being part of physical medical equipment. This includes diagnostic algorithms, patient monitoring tools, and clinical decision support applications.

In the UAE, SaMD falls under medical equipment regulations and must meet safety and efficacy standards based on its intended medical purpose.

Does My Digital Health Product Need Approval?

There's no simple test to determine if your digital health product qualifies as SaMD. Regulators generally consider whether your software:

• Diagnoses, treats, or prevents diseases
• Influences clinical decisions or treatment plans
• Analyses patient data for medical insights
• Monitors vital signs or physiological parameters

Wellness apps, administrative software, and general patient education tools without diagnostic capabilities typically don't require SaMD approval. However, always consult a legal specialist to avoid misclassification, which can lead to regulatory issues and market delays.

How Does the UAE Classify SaMD?

The UAE uses a risk-based classification system with four classes (I through IV). Classification depends on the intended medical use and potential for harm:

• Class I: Low-risk products like basic administrative software
• Class II: Low-to-moderate risk tools such as vital sign monitors
• Class III: Moderate-to-high risk products including diagnostic imaging analysis
• Class IV: High-risk systems like AI-driven critical care decision support

Your classification determines the documentation, clinical evidence, and approval timeline required. Engaging a regulatory consultant early can save significant time and resources. This is often where businesses seek support from a life science law firm in UAE to ensure accurate classification and compliance.

What's Required for Approval?

Marketing approval from EDE requires electronic submission through authorized representatives or manufacturers. Key requirements include factory registration certificates, local agency contracts, conformity certificates (CE Mark, FDA approvals), and product documentation.

Higher-risk classifications need additional clinical evidence and safety data. The specific requirements vary based on your product's classification and origin. A licensing expert can help organize your documentation and navigate the filing process to avoid delays.

What Standards Must Be Met?

SaMD must comply with international standards, particularly ISO 13485 for quality management and ISO 14971 for risk management. Additional requirements include:

• Traceability and quality assurance systems
• Bilingual labelling (Arabic and English) with device details, risks, and instructions
• Appointment of a local representative who assumes legal responsibility for compliance

The Bottom Line

The UAE's SaMD regulatory framework balances innovation with patient safety through risk-based oversight. While the system supports digital health advancement, successful market entry requires understanding classification criteria, documentation requirements, and compliance obligations. Support from a technology law firm in UAE can also help companies address digital, data, and regulatory challenges.

Whether launching a new product or adapting to regulatory change, it is essential to consult with a lawyer who specialises in digital health regulatory matters.