Looms operates under the health data regulations of the countries and emirates where it is available. This article explains the key regulatory frameworks that govern how your data is handled, and what that means in practice. For a plain-language overview of how Looms protects your data technically, see how Looms protects your data, and our blog post on protecting your medical records privacy covers what patients can do on their end.
UAE regulatory framework
In the UAE, health data is governed by several overlapping frameworks:
- Dubai Health Authority (DHA) Health Data Governance Framework — covers data standards, patient consent and interoperability for providers and platforms operating in Dubai
- Abu Dhabi Health Services Company (SEHA) and Department of Health Abu Dhabi — equivalent governance in the Emirate of Abu Dhabi
- Ministry of Health and Prevention (MOHAP) — federal-level regulations on patient rights, electronic medical records and data security
- UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) — a broad data protection law covering all personal data, with specific provisions for sensitive categories including health data
What Looms does to comply
- Data is stored on servers within UAE jurisdiction or with equivalent regulatory protection
- Health data is classified as sensitive personal data and handled under stricter controls than general personal data
- Data is encrypted at rest and in transit
- Patient consent is required before sharing data with any third party
- Data is not sold or shared with advertisers
- Data retention periods follow regulatory guidelines — you can request deletion at any time
Your rights under UAE data law
- Right to access — you can request a copy of all data held about you
- Right to correction — you can request inaccurate data be corrected
- Right to deletion — you can request your data be erased, subject to legal retention requirements
- Right to object — you can withdraw consent for optional data processing at any time
- Right to data portability — you can download your health data in a standard format
Questions and complaints
For questions about how your data is handled, contact Looms via the in-app support channel. For formal complaints, the relevant authority in Dubai is the DHA; in Abu Dhabi, the Department of Health; and for federal matters, MOHAP or the UAE Data Office.