Telemedicine Regulation in the GCC: 2026 Update
The telemedicine landscape across the Gulf Cooperation Council (GCC) has undergone transformative change since the COVID-19 pandemic catalysed rapid adoption of digital health services. As of 2026, all six GCC states have enacted or substantially updated telemedicine-specific regulations, creating a complex but increasingly mature legal environment for healthcare providers, technology platforms, and patients. This article provides a comprehensive update on telemedicine regulation in the GCC, covering licensing requirements for telehealth providers, cross-border telemedicine rules, data protection obligations, prescription regulations, insurance coverage mandates, and technology requirements.
Telemedicine Regulations by Country: 2026 Status
Each GCC state has taken a distinct approach to telemedicine regulation, reflecting differences in healthcare system structure, digital maturity, and regulatory philosophy. The table below provides a comparative overview of the current regulatory status across the region:
| Country | Primary Regulator | Key Legislation | Year Enacted | Licensing Requirement |
|---|---|---|---|---|
| UAE | Ministry of Health & Prevention (MOHAP) DHA (Dubai) DoH (Abu Dhabi) | Federal Law No. 8 of 2024 on Telehealth Services | 2024 | Telehealth Service Provider Licence + individual practitioner licence |
| Saudi Arabia | Ministry of Health (MOH) Saudi Health Council | Telehealth Regulation 2025 (updated) | 2025 | E-Health Service Provider Licence (MoH) |
| Bahrain | National Health Regulatory Authority (NHRA) | Telehealth Practice Regulation 2025 | 2025 | Telehealth Facility Registration + Telehealth Practitioner Licence |
| Qatar | Ministry of Public Health (MoPH) | Qatar Telehealth Policy 2026 | 2026 | Telehealth Service Registration with MoPH |
| Kuwait | Ministry of Health (MoH) | Telemedicine Regulation 2025 | 2025 | Telemedicine Centre Licence (MoH) |
| Oman | Ministry of Health (MoH) | Oman Telehealth Regulation 2025 | 2025 | Telehealth Provider Registration with MoH |
Licensing for Telehealth Providers
Licensing requirements for telehealth providers have become more stringent across the GCC in 2025-2026. The general trend is toward a two-tier licensing structure: organisational licensing and individual practitioner licensing.
Organisational Licensing
Any entity providing telemedicine services must obtain a telehealth service provider licence from the relevant health authority. Key requirements common across GCC jurisdictions include:
- Incorporation as a registered healthcare entity in the country of operation.
- Submission of a detailed telemedicine service description, including clinical scope, technology platform, and geographic coverage.
- Evidence of adequate malpractice insurance (minimum coverage varies: AED 5 million in UAE, SAR 5 million in Saudi Arabia, BHD 200,000 in Bahrain).
- Designation of a medical director responsible for clinical governance.
- Compliance with data protection and cybersecurity standards.
- Annual renewal with audit of service quality and patient outcomes.
Individual Practitioner Licensing
Healthcare professionals providing telemedicine services must hold individual licences that explicitly authorise remote practice. Most GCC states now require:
- Valid in-country medical licence with a telehealth endorsement.
- Completion of a recognised telemedicine training programme (mandatory in UAE and Saudi Arabia since 2025).
- Professional indemnity insurance covering telemedicine consultations.
- Registration in the national healthcare provider registry with telemedicine designation.
Cross-Border Telemedicine
Cross-border telemedicine – where the patient is in one GCC state and the healthcare provider is in another, or outside the GCC entirely – remains one of the most complex regulatory areas. The 2026 regulatory landscape reflects a cautious approach.
| Scenario | Permitted in 2026? | Conditions |
|---|---|---|
| Provider in GCC-A to patient in GCC-B | Partially | Provider must hold licence in patient’s country or operate under a GCC mutual recognition agreement (pilot stage in UAE-Saudi-Bahrain corridor) |
| Provider outside GCC to patient in GCC | Restricted | Generally prohibited unless the foreign provider holds a local licence. Exceptions for second opinions in specialised fields with MoH approval |
| GCC provider to patient outside GCC | Not regulated | Subject to the patient’s country laws. GCC authorities do not restrict outbound telemedicine |
| GCC-wide telehealth platform | Evolving | GCC Health Ministers Council is developing a unified telemedicine licence with mutual recognition expected by 2027 |
Data Protection and Privacy
Telemedicine platforms are subject to the same data protection laws that apply to all healthcare data processing, with telemedicine-specific provisions added in the 2025-2026 regulatory updates:
- Data localisation – All GCC states now require patient health data generated through telemedicine to be stored within the country. Saudi Arabia’s PDPL and the UAE’s Federal Decree-Law No. 45 of 2021 mandate strict data localisation for health data. Bahrain, Qatar, Kuwait, and Oman have similar requirements.
- Consent – Specific informed consent for telemedicine must be obtained in writing (including electronic consent with audit trail). The consent must cover the nature of telemedicine, limitations, privacy risks, and data handling practices.
- Platform security – Telemedicine platforms must implement end-to-end encryption for all consultations. Minimum encryption standards are mandated: AES-256 for data at rest and TLS 1.3 for data in transit.
- Recording – Most GCC states require that telemedicine consultations be recorded and retained for a minimum period (5 years in UAE, 7 years in Saudi Arabia, 5 years in Bahrain). Patients must be informed of recording and have the right to access their consultation records.
- Breach notification – All GCC states now impose a 72-hour breach notification requirement for health data breaches, aligned with PDPL and GDPR standards.
Prescription Regulations
The regulation of remote prescribing has been a focal point of 2025-2026 telemedicine reforms across the GCC. Key provisions include:
- Permitted prescriptions – Telemedicine consultations may result in prescriptions for non-controlled medications. Prescriptions for controlled substances are generally prohibited via telemedicine, with narrow exceptions for refills of stabilised chronic conditions.
- Patient-provider relationship – A valid telemedicine prescription requires a prior established patient-provider relationship. The UAE requires at least one in-person consultation before telemedicine prescribing. Saudi Arabia permits de novo telemedicine prescribing for non-controlled medications with appropriate clinical assessment.
- Electronic prescribing – All GCC states have adopted electronic prescribing standards aligned with GSO guidelines. E-prescriptions must include the prescriber’s digital signature, licence number, and telehealth endorsement.
- Prescription duration – Telemedicine prescriptions are typically limited to 30 days with a maximum of two refills before an in-person review is required.
Insurance Coverage
Insurance coverage for telemedicine has expanded significantly in 2026. The table below summarises current coverage mandates:
| Country | Telemedicine Covered by Mandatory Insurance? | Scope of Coverage | Reimbursement Model |
|---|---|---|---|
| UAE (Dubai) | Yes (under DHA Standard Health Insurance) | GP consultations, specialist consultations, mental health, follow-ups | Same rate as in-person (mandated 2025) |
| UAE (Abu Dhabi) | Yes (under DoH requirements) | GP, specialist, chronic disease management, mental health | 80% of in-person rate (minimum) |
| Saudi Arabia | Yes (under CCHI regulations) | GP consultations, preventive care, follow-ups, mental health | Parity with in-person (effective 2026) |
| Bahrain | Under development | GP consultations (pilot phase) | Negotiated rates |
| Qatar | Limited | Public sector telemedicine covered; private insurance optional | Varies by insurer |
| Kuwait | Limited | Telemedicine not yet mandated in basic insurance package | N/A |
| Oman | Under development | Pilot programmes in public health system | N/A |
The trend across the GCC is toward reimbursement parity between telemedicine and in-person consultations. Saudi Arabia and Dubai have led this movement, with other emirates and GCC states expected to follow suit by 2027.
Technology Requirements
GCC regulators have issued detailed technology requirements for telemedicine platforms. These requirements are designed to ensure quality of care, data security, and interoperability.
- Video consultation standards – Minimum resolution of 720p, synchronised audio-video, and bandwidth management to ensure continuous consultation quality.
- Store-and-forward – Platforms must support secure asynchronous transmission of medical images, laboratory results, and clinical notes with metadata integrity verification.
- Remote monitoring – Integration with approved medical devices (blood pressure monitors, glucose meters, pulse oximeters) that meet GSO medical device certification requirements.
- Interoperability – Compliance with HL7 FHIR standards for electronic health record (EHR) integration. All GCC states mandate that telemedicine platforms be interoperable with the national EHR system.
- Audit logging – Comprehensive audit trails recording every interaction within the platform, with tamper-evident logging and annual audit certification.
- Accessibility – Compliance with web accessibility standards (WCAG 2.1 AA) to ensure telemedicine services are accessible to patients with disabilities.
Quality and Safety Standards
New quality and safety standards introduced in the 2025-2026 regulatory updates include:
- Mandatory clinical guidelines for each telemedicine service type, approved by the relevant health authority.
- Patient identification protocols using biometric verification or multi-factor authentication.
- Emergency protocols requiring telemedicine platforms to identify the patient’s nearest emergency facility and provide direct transfer capability.
- Patient satisfaction and outcome measurement as a condition of licence renewal.
- Continuous professional development requirements for telemedicine practitioners (minimum 10 CME hours annually in telemedicine-specific topics).
Frequently Asked Questions
Can a doctor licensed in one GCC country provide telemedicine to a patient in another GCC country?
Not without additional licensing. As of 2026, doctors must hold a valid licence in the patient’s country. A GCC-wide mutual recognition framework is under development but not yet operational.
Is telemedicine covered by health insurance in the GCC?
Coverage varies. The UAE (Dubai and Abu Dhabi) and Saudi Arabia mandate telemedicine coverage in basic health insurance plans. Bahrain, Qatar, Kuwait, and Oman are in earlier stages of mandating coverage.
What are the data localisation requirements for telemedicine platforms?
All GCC states require patient health data to be stored within the country’s borders. Telemedicine platforms must maintain data centres or use sovereign cloud services in the country of operation.
Can I get a prescription for medication via telemedicine in the GCC?
Yes, for non-controlled medications. Controlled substances generally cannot be prescribed via telemedicine. Prescriptions require a prior patient-provider relationship in most GCC states.
What happens if a telemedicine platform suffers a data breach?
The platform must notify the health authority and the data protection authority within 72 hours. Affected patients must be informed. The platform may face licence suspension, fines, and civil liability.
Do I need a separate licence to offer telemedicine services across multiple GCC countries?
Yes. Each country requires its own telemedicine service licence. However, the GCC Health Ministers Council is working on a unified telemedicine licence expected by 2027 that would streamline multi-country licensing.
Conclusion
The regulatory framework for telemedicine in the GCC has matured significantly by 2026. All six member states now have dedicated telemedicine regulations, with clear licensing pathways, data protection requirements, prescribing rules, and insurance coverage mandates. While the UAE and Saudi Arabia lead in regulatory sophistication, Bahrain, Qatar, Kuwait, and Oman have made substantial progress in establishing their own frameworks. The key challenges facing the sector are the harmonisation of cross-border telemedicine rules, the development of a GCC-wide licensing system, and the continued evolution of reimbursement models to achieve parity between telemedicine and in-person care. For healthcare providers and technology companies, navigating this multi-jurisdictional regulatory landscape requires careful planning, dedicated compliance resources, and ongoing engagement with health authorities across the region.
