Medical device regulatory readiness in the GCC: Saudi Arabia and UAE
The Gulf Cooperation Council remains a high-growth market for medical devices, led by Saudi Arabia and the United Arab Emirates.
In Short
- Saudi Arabia: The Saudi Food and Drug Authority (SFDA) regulates devices under the Law of Medical Devices and Supplies (Royal Decree No.
- Both SFDA and MOHAP align to GHTF/IMDRF risk classes.
- Saudi Arabia (SFDA): - Establishment: Create GHAD accounts; register the manufacturer and the Saudi Authorized Representative (AR) in MDNR.
Both jurisdictions align to GHTF/IMDRF concepts but operate distinct national schemes with local-authorized-representative, Arabic labelling, importer controls, and vigilance obligations. Saudi Arabia centralizes medical device oversight under the Saudi Food and Drug Authority (SFDA) using the GHAD/MDNR platforms and requires Medical Device Marketing Authorization (MDMA). The UAE registers devices with the Ministry of Health and Prevention (MOHAP) National Device Registry (NDR), while Dubai Health Authority (DHA) and Department of Health Abu Dhabi (DOH/HAAD) add emirate-level controls. This guide maps the legal bases, pathways, QMS expectations, UDI and labelling rules, and lays out a practical 90–180 day readiness path.
1) The regulator and the legal framework
Saudi Arabia: The Saudi Food and Drug Authority (SFDA) regulates devices under the Law of Medical Devices and Supplies (Royal Decree No. M/54 of 1442H/2021) and its Implementing Regulations (SFDA Board decisions issued 2022; subsequent circulars through 2025).
More on 1) The regulator and the legal framework
Core requirements are set out in SFDA MDS-REQ 1 Essential Principles of Safety and Performance, Saudi Vigilance guidance (e.g., MDS-G5 series), and market authorization procedures via GHAD (the SFDA e-portal) and the Medical Devices National Registry (MDNR). Foreign manufacturers must appoint a Saudi Authorized Representative (AR). Marketing requires MDMA for the device (or family) and Importer Registration (IR) for each importer. UAE: The Ministry of Health and Prevention (MOHAP) regulates devices nationally under Federal Law No. 8 of 2019 on Medical Products, the Profession of Pharmacy and Pharmaceutical Establishments and its Implementing Regulations (latest substantial amendments 2022–2024), with device registration and listing in the National Device Registry (NDR). A UAE-based Authorized Local Agent/Representative is required; importers need a MOHAP Medical Store license. Emirate authorities—Dubai Health Authority (DHA) and Department of Health Abu Dhabi (DOH/HAAD)—impose additional controls (facility licensing, tender formularies, traceability for selected implantables), but MOHAP registration is the national baseline. GCC: The Gulf Standardization Organization (GSO) continues work toward greater convergence; as of 2026, no unified Gulf registration replaces national SFDA or MOHAP approvals.
2) Device classification in KSA and UAE
Both SFDA and MOHAP align to GHTF/IMDRF risk classes. Saudi Arabia: General medical devices are Class A, B, C, D per GHTF rules; IVDs follow Classes A–D.
More on 2) Device classification in KSA and UAE
Borderline and software classification follow EU/GHTF principles; for SaMD, intended use and impact on diagnosis/therapy elevate risk. SFDA issues classification determinations via GHAD when needed. UAE: MOHAP applies GHTF-based rules (A–D for devices and IVDs). MOHAP may reference EU MDR/IVDR rules for detailed determinations. For accessories and kits, classification is driven by the highest-risk constituent. For implantables and life-support devices, expect Class C/D (devices) or C/D (IVDs) and enhanced dossier expectations. Implications: Higher classes trigger deeper technical review, stricter clinical evidence expectations, and shorter post-market reporting timelines.
3) Conformity assessment and approval pathway
Saudi Arabia (SFDA): - Establishment: Create GHAD accounts; register the manufacturer and the Saudi Authorized Representative (AR) in MDNR. Importers obtain Importer Registration (IR). - Evidence: SFDA recognizes approvals from Founding Regulatory Authorities (FDA, EU [CE under MDR/legacy MDD where valid], Health Canada, TGA, MHLW/PMDA).
More on 3) Conformity assessment and approval pathway
Recognition shortens review but does not waive MDMA. - Submission: Apply for Medical Device Marketing Authorization (MDMA) per device family via GHAD. Provide STED/IMDRF Technical Documentation (device description, Essential Principles checklist to MDS-REQ 1, risk management per ISO 14971, clinical evidence, labelling/UDI data, manufacturing/QMS evidence [ISO 13485 or MDSAP], AR mandate, importer details). SFDA may request supplementary review or site inspection. - Timelines: Typical clock for FRA-backed Class B/C is ~30–60 working days; Class D or non-FRA may run 60–120+ working days depending on queries. UAE (MOHAP): - Establishment: Appoint a UAE Authorized Local Agent; ensure importer holds MOHAP Medical Store license. - Classification: Request classification if uncertain. - Submission: File NDR registration with technical file (GHTF-aligned), evidence of approval in FRA jurisdictions (if available), QMS (ISO 13485), labelling and Arabic materials, and free-sale/legalization as required. - Timelines: Typical 45–90 working days; expedited when robust FRA approvals exist. DHA/DOH may require device listing in procurement systems post-MOHAP approval.
4) QMS expectations and ISO 13485 mapping
Both SFDA and MOHAP expect a certified ISO 13485 QMS (or equivalent evidence). SFDA accepts ISO 13485 certificates from accredited bodies and will leverage MDSAP or FRA audits as supportive evidence; it does not replace MDMA.
More on 4) QMS expectations and ISO 13485 mapping
Importers/distributors must maintain procedures for storage, distribution, traceability, and vigilance. For software devices, lifecycle controls per IEC 62304 and cybersecurity per IMDRF principles are expected in the technical file. Change control must ensure registered labelling and intended use remain consistent; significant changes typically require prior approval/update. Internal audits and management reviews are routinely requested during technical review or inspections.
5) UDI, labelling, and Arabic/local requirements
Saudi Arabia: SFDA operates a UDI system aligned to IMDRF with issuing agencies (e.g., GS1, HIBCC, ICCBBA). Device Identifier (DI) and production identifiers must appear on labels for most classes; UDI master data must be uploaded via MDNR/GHAD per SFDA circular timelines (phased by class; as of 2026, Classes B–D are fully enforced; Class A largely in scope with specific exceptions).
More on 5) UDI, labelling, and Arabic/local requirements
Labels/IFUs must be Arabic or bilingual; eIFU is acceptable for professional-use devices if an Arabic summary and access instructions are provided. The Saudi Authorized Representative and importer details must be on labelling or accompanying documentation. Animal-derived materials (e.g., gelatin, tallow) require declarations of source and halal compliance or risk justification per SFDA guidance. UAE: MOHAP requires labelling compliant with GHTF/EU-style content; Arabic is mandatory for patient-facing information and outer packaging for consumer-use devices, with English commonly accepted for professional-use labelling when an Arabic IFU/insert or summary is available. NDR captures DI/master data; UDI is being phased in prioritizing high-risk and implantable devices, aligned to IMDRF and GS1. DHA/DOH may impose additional traceability (e.g., GTIN capture in hospital systems).
6) Post-market surveillance, vigilance, and adverse event reporting
Saudi Arabia: Manufacturers, ARs, and importers must operate PMS proportional to risk, including complaint handling, trend analysis, and FSCA execution. Serious incidents must be reported to Saudi Vigilance within tight timelines (e.g., immediately for serious public health threats; typically within 10 calendar days for serious incidents; within 30 days for non-serious malfunctions leading to FSCA), with Field Safety Notices in Arabic and distribution tracking.
More on 6) Post-market surveillance, vigilance, and adverse event reporting
Periodic reporting and post-market clinical follow-up (PMCF) may be requested for high-risk devices. UAE: MOHAP’s medical device vigilance program requires prompt reporting of serious incidents (commonly within 10 days from awareness) and submission of FSCAs/recalls; notifications to emirate authorities (DHA/DOH) may also be required where devices are placed or used. The Authorized Local Agent coordinates case intake, investigation, and communication. MOHAP may request PSUR-style summaries or PMCF updates for certain high-risk/innovative devices. Recordkeeping: Maintain complaint files, investigation reports, CAPA, distribution traceability, and communication logs for inspection.
7) A 90–180 day readiness path for KSA and UAE
- Days 0–30
- Gap assessment vs SFDA MDS-REQ 1 and MOHAP dossier expectations; confirm device family strategy and FRA evidence (FDA/CE/HC/TGA/PMDA). - Appoint/contract Saudi AR and UAE Authorized Local Agent; verify importer licensing (KSA IR; UAE Medical Store). - Freeze intended use/label claims; start Arabic translation plan; collect halal/source declarations if animal-derived materials.
- Days 31–60
- Build STED/IMDRF technical file (device description, EP checklist, RMF to ISO 14971, clinical evidence, QMS certs, labelling with UDI, manufacturing and sterilization evidence). - Create GHAD/MDNR and MOHAP/NDR accounts; prepare establishment documents, PoA/legalization. - Pre-submit classification queries if borderline/SaMD.
- Days 61–120
- File SFDA MDMA and MOHAP NDR submissions; respond to queries within 5 working days to protect clocks. - Prepare DHA/DOH listing artifacts (forms, GTINs) if targeting public tenders. - Stand up PMS procedures, vigilance contacts, and Arabic FSN templates.
- Days 121–180
- Complete importer onboarding, UDI data loads, and shipment release SOPs. - Pilot traceability in UAE facilities as required; rehearse recall. - Post-approval: book initial distributor training; align change control with notification/variation triggers.
Questions
What are typical timelines to market in Saudi Arabia and the UAE?
With complete FRA-backed evidence and responsive Q&A, SFDA MDMA for Class B/C devices often completes in 30–60 working days (Class D or non-FRA: 60–120+). MOHAP NDR registration commonly takes 45–90 working days. Add 2–4 weeks for AR/Agent contracting, importer licensing checks, and Arabic translations. Public-sector listings with DHA/DOH can add several weeks post-MOHAP approval.
Do I need a local legal representative and what are the costs?
Yes. Saudi Arabia requires a Saudi Authorized Representative (AR); the UAE requires a UAE-based Authorized Local Agent/Representative. Each importer must also be licensed (KSA IR; UAE Medical Store). Commercial fees vary by device portfolio and service scope; plan for annual AR/Agent retainers plus regulator fees. SFDA/MOHAP fee schedules are public; for multi-family Class C/D portfolios, budget low five-figure USD regulatory fees per country, excluding translation/legalization.
Is MDSAP accepted in place of SFDA or MOHAP approvals?
No. MDSAP is valuable QMS evidence and can streamline review, but it does not replace SFDA MDMA or MOHAP NDR registration. Both authorities expect ISO 13485-compliant QMS; they may consider MDSAP and FRA audit reports to reduce technical QMS queries or inspection burden.
Do SFDA and MOHAP recognize approvals from FDA, EU, Health Canada, TGA, or PMDA?
Yes. Both SFDA and MOHAP recognize approvals from the GHTF founding regulatory authorities (FDA, EU, Health Canada, TGA, MHLW/PMDA) as supportive evidence. Recognition typically shortens review and reduces depth of technical scrutiny, but you must still file a complete local application (SFDA MDMA; MOHAP NDR) and meet local labelling/UDI and Arabic requirements.
What are common reasons for rejection or delays?
Frequent issues include: mismatched intended use between dossier and labels; incomplete Essential Principles checklist to MDS-REQ 1; missing or poor-quality Arabic labelling/IFU; lack of formal AR/Agent mandate; incorrect family grouping; expired/legacy CE certificates without proper MDR transition proof; insufficient clinical evidence for higher-risk devices; UDI data inconsistencies; missing halal/source declarations for animal-derived materials; and slow responses to regulator queries.
Practical orientation, not legal advice. Rules differ by jurisdiction; your quality and compliance team decides what applies.
The Medical Device Production Guide
Built to revision. Inspected. On record.
- What the QMSR changed in February 2026
- Supplier to finished build
- Inspect, review, correct
- Labels, UDI and traceability
Plus Evidence map and four worksheets.
Get the medical device guideWe ask for your name and email so we can handle this request. The full guide then opens on this site, ready to translate, print or save. Privacy policy. Practical orientation, not legal advice; your quality unit decides which rules apply.
UltimateFree guide
The Medical Device Production Guide
Built to revision. Inspected. On record.
Keep reading
- Global medical device regulatory readiness (2026)
Australia Medical Device Regulatory Readiness Guide
Brazil medical device regulatory readiness guide (ANVISA)
Canada Medical Devices Regulations (SOR/98-282) Readiness
China Medical Device Regulatory Readiness Guide 2026
EU MDR medical device regulatory readiness (European Union)