Frameworks · Middle East
ADHICS V2
The Abu Dhabi Healthcare Information and Cyber Security Standard Version 2 (DOH/SD/ICSO/ADHICS/V2/2024) sets information and cyber security requirements for entities that handle health information in Abu Dhabi. The Department of Health – Abu Dhabi issued it in May 2024, and it has been effective from August 2024. Version 2 expands the 2019 standard to cover governance for emerging technology, medical device security, cloud controls, third-party requirements and breach notification.
Who it applies to
It applies to healthcare facilities, payers, service providers and health technology vendors in Abu Dhabi. It also applies to any system that connects to health information systems in the emirate.
Main requirements
Governance & risk
Entities run information security governance and risk management, and report on compliance to the Department of Health.
Protection of health information
Entities classify health information and apply access control, security for medical devices and connected equipment, and cloud controls.
Third parties
Vendors and service providers that handle health information must meet security requirements.
Incidents & breaches
Entities manage incidents and notify the Department of breaches within the prescribed period.
How xmodo supports it
- 1
Version 2 is set up with each of its requirements, and each control has an owner, evidence and a calculated compliance status. The 2019 edition remains available, so a facility can move its existing evidence across.
- 2
Medical devices and connected equipment are held in the asset register with the controls that apply to them.
- 3
Breach notification runs in the incident workflow, with timestamps from discovery to submission.
- 4
Mapping to ISO/IEC 27001, HIPAA and the UAE PDPL lets a provider with international accreditation or US partners implement shared controls once.
Related frameworks
ADHICS V2 shares requirements with the frameworks below. Controls you already run for any of them count towards ADHICS V2 as well.
Frequently asked questions
Which version does xmodo support?
xmodo supports Version 2, document reference DOH/SD/ICSO/ADHICS/V2/2024, published in May 2024 and effective from August 2024. The 2019 edition is kept as a legacy version to support migration.
Who issues ADHICS?
The Department of Health – Abu Dhabi issues it through its Information and Cyber Security Office. HAAD, the former issuer name, is no longer used and is kept only as an alternative search term.
Does ADHICS apply in Dubai?
No. ADHICS applies in Abu Dhabi. Facilities in Dubai follow the Dubai Health Authority's standards, which xmodo supports separately.
We follow HIPAA through a US partner. Does that help?
Yes. The mapping gives credit for shared safeguards. The remaining ADHICS work is mainly Department of Health reporting, medical device security and the emirate's third-party requirements.