DHA inspection checklist and compliance calendar for Dubai clinics

DHA runs two parallel inspection tracks for outpatient facilities in Dubai: a licensing inspection before a clinic activates its license, and operational inspections throughout the license term. Both tracks use the same compliance document, the Standards for Outpatient Facilities (DHA/HRS/HPSD/ST-45), issued in November 2024 and in effect from 19 January 2025.

The inspection tool for general outpatient clinics is the Weyak Outpatient Care Facility Assessment Checklist. DHA publishes this checklist on its licensing regulations page at dha.gov.ae, alongside separate versions for hospitals, day surgical centers, fertility clinics, dental labs, and over 40 other facility types. Each type of facility is assessed against its own applicable checklist, not a generic one.

The outpatient checklist covers 15 compliance domains: registration and licensure, facility accessibility, consultation and examination rooms, treatment areas, child immunization protocols (where in scope), dental services (where applicable), laboratory standards (where applicable), diagnostic imaging (where applicable), medical equipment management, human resources compliance, policies and procedures, health records management, infection control, medical waste management, and fire safety.

Each domain is assessed as compliant or non-compliant. Inspectors do not offset a strong result in one domain against a gap in another. A waste management non-compliance carries the same enforcement consequence as a licensing non-compliance. Each finding generates a violation on the facility's regulatory record on the Sheryan portal.

DHA makes the checklists publicly available so that clinics can assess themselves between inspection visits. The self-inspection process is not DHA-administered; it is an internal gap identification exercise using the same standards the inspector applies on the day. Running through the applicable checklist every quarter is the clearest way to identify current gaps before the annual license renewal window opens, when gaps become harder to resolve under time pressure.

Three distinct inspection types affect outpatient clinics in Dubai, each with a different trigger and enforcement consequence.

The final inspection occurs before a clinic can activate its DHA license. The application is submitted through the Sheryan portal with a fee of AED 2,000 for GP clinics, polyclinics, dental clinics, and school clinics (AED 3,000 for day surgical and IVF facilities; AED 4,000 for hospitals). The inspector verifies that the physical build-out matches the approved engineering layout, that equipment is installed and calibrated, that a medical waste management contract with a Dubai Municipality-approved contractor is in place, that the civil defense certificate is current, and that a NABIDH-integrated EMR system is operational. Any deviation from the approved plans (a relocated wall, a treatment room not on the original layout) must be approved by DHA before the inspection, or the inspector will flag it as a non-compliance.

Random operational inspections occur during the active license period without a fixed schedule or advance notice. DHA inspectors assess ongoing compliance across all 15 checklist domains, not just areas of known weakness. Facilities with recent violations or unresolved complaints on their Sheryan record tend to receive more frequent visits, but any licensed outpatient clinic can be selected at any time.

Mystery patient audits are a separate program in which DHA inspectors register as patients and go through the full intake, consultation, and billing process as any patient would. These audits assess the patient-facing side of compliance: identity verification at registration, informed consent documentation before any procedure, accuracy of billing codes against services actually rendered, and whether patients receive written information about their rights. The facility has no advance indication that the visit is an audit.

Amendment inspections occur whenever a clinic applies to add services, change its scope, or expand its physical space. These follow the same pre-licensing process as the original final inspection, including the applicable inspection fee.

Licensing and staff credentials are the first verification step. Every clinician on duty must hold a current, active DHA license on Sheryan. An expired professional license on the day of inspection (even by a single day) is a non-compliant finding against the facility. The medical director must be named on the facility license and hold the DHA designation matching the clinic's scope. If the scope includes specialist services, the relevant specialist's DHA license must be current and active.

NABIDH integration has been a compliance checkpoint since the January 2025 outpatient standards took effect. Inspectors verify that the EMR vendor is on DHA's approved list, that the system is actively transmitting patient data to the NABIDH platform using HL7 messaging standards, and that records include all NABIDH Minimum Data Set fields: MRN number, Emirates ID, ICD-10 diagnosis codes, medication orders, allergy records, and clinician Sheryan IDs. Since 2025, digital patient consent forms must be captured through the integrated EMR system with time-stamped signatures. Patient data must be stored on UAE-based servers; dental facilities must retain records for 25 years per Federal Law 2019 on ICT.

Infection control assessments cover a detailed set of items: a functioning autoclave or high-vacuum steam sterilizer; restricted access to the sterilization room; documented capability for heat-sensitive instrument sterilization; hand hygiene facilities at the point of care with completion logs; PPE availability and usage records; and cleaning schedules for clinical surfaces with documented completion. Sterile and contaminated processing zones must be physically separated, not just procedurally distinct.

Medical waste management requires an active contract with a Dubai Municipality-approved contractor, with collection frequency matched to the facility's waste volume. Biohazard and sharps containers must be labeled, in use, and accompanied by a current waste collection log.

Fire safety compliance is checked against the Dubai Civil Defense approval certificate. The locations of fire extinguishers, smoke detectors, emergency lighting, and exit signage must match the approved civil defense plan. A lapsed civil defense certificate is a non-compliant finding regardless of whether the physical fire equipment is functional.

Equipment maintenance is assessed through calibration records and servicing logs. Clinical equipment must have current calibration certificates and documented maintenance schedules. DHA inspectors increasingly verify that these logs are digitally accessible on the day of the visit, rather than stored in paper binders that require a search to locate.

DHA categorizes violations under two types. Ethical and technical violations cover clinical standards and operational non-compliance. Administrative violations cover documentation, procedural, and filing failures. This classification determines the enforcement timeline and the scope of consequences.

A clinical non-compliance (an unlicensed professional providing treatment, a sterilization process that does not meet the prescribed standard, a non-functional fire suppression system) typically triggers immediate remediation requirements and can result in license suspension pending corrective action. These findings are treated as highest severity because they have direct patient safety implications. An administrative violation (an incomplete policy document, a waste log with gaps, a consent form missing a signature) carries a financial penalty but generally allows the facility to continue operating while submitting corrective evidence by the specified deadline.

Penalty amounts under DHA regulations start at AED 500 for minor administrative violations and reach AED 1 million for serious clinical violations. Repeat violations of the same type within a 12-month period can be doubled up to a maximum of AED 2 million. All penalties are recorded on the Sheryan portal. For violations involving insurance billing — including claims for services not rendered, diagnosis alteration, or advance billing for incomplete treatment — DHA has imposed fines in the range of AED 10,000 to AED 80,000 per facility and has referred cases involving suspected fraud to criminal prosecution.

A facility that contests a violation can file an appeal within 30 days of the issue date through the Sheryan portal. Appeals are free of charge and DHA processes them within 30 working days, updating the violation record according to the outcome. The appeal is the appropriate channel when a finding is factually incorrect: for instance, when a license was active on the day of inspection but appeared expired in the inspector's system due to a Sheryan sync delay. Supporting documents must be submitted with the appeal at the time of filing.

All violations, resolved or not, remain visible on the facility's Sheryan regulatory profile and form part of the context future inspectors review before arriving at the clinic.

A Dubai outpatient clinic's compliance cycle is anchored to two sets of dates: the facility license expiry and the individual expiry dates of every clinical staff member's DHA professional license.

Facility licenses renew annually. The Sheryan renewal window opens 90 days before the expiry date, and renewal must be submitted within three months of expiry. Renewal fees for clinics range from AED 2,500 to AED 12,000 per year depending on facility category, with multi-year options (two or three years) available at discounted rates. Any outstanding violations or unpaid fines on the facility's Sheryan record must be cleared before renewal proceeds. Late renewal carries a monthly penalty of AED 500 to AED 8,000 depending on facility type. A license expired beyond six months cannot be renewed; the facility must re-apply as a new license, which includes a fresh pre-licensing inspection at the applicable fee.

Professional licenses renew annually and can be submitted within 90 days of the expiry date. Physicians and dentists face a late penalty of AED 600 per month; nurses and allied health professionals face AED 200 per month. Completion of Continuing Professional Development credits is a prerequisite for professional license renewal, and DHA inspectors check staff CPD records during operational inspections.

A practical compliance calendar for a clinic with a June 30 facility license expiry: In early April (90 days before expiry), the facility manager reviews all staff license expiry dates, confirms CPD completion status for the current cycle, checks that the trade license is current, and clears any outstanding Sheryan violations. The Sheryan facility renewal application goes in during May, leaving at least 30 days for DHA to review and raise queries before the expiry date. Year-round, four parallel contract and certificate cycles need active tracking: the medical waste contractor agreement (and the contractor's own Dubai Municipality approval status), the civil defense certificate, equipment calibration schedules, and NABIDH connectivity status.

Running through the DHA self-inspection checklist in January and October, well outside the renewal pressure window, provides the most reliable early view of gaps that need addressing before they affect the renewal application.

An unannounced inspection is by definition not something to prepare for when the inspector arrives. The preparation is continuous, and there are specific readiness conditions that must be correct at all times.

The facility's current DHA license must be posted visibly in the clinic. The on-duty staff schedule, showing each clinician's name and DHA license number, must be accessible at reception immediately. If the front desk cannot produce a clinician's license number within two minutes of a request, that is the first thing an inspector records.

Document readiness means a defined, consistent location in each clinical area for the following: the cleaning and sterilization schedule with completion logs, the medical waste collection log, calibration certificates for clinical equipment, and the civil defense certificate. The clinic manager and at least one backup person must know where these are. Searching for the civil defense certificate during an inspection is itself a signal of inadequate document control.

Staff license monitoring is the most time-sensitive task. The facility needs a mechanism (a shared calendar, a spreadsheet, an EMR-generated alert) that flags each clinician's DHA license expiry at 60 days. A clinician must not be on duty after their DHA license has expired. When a renewal is submitted through Sheryan, verify the updated license is active before the previous one lapses, as processing delays can create a gap of several days.

NABIDH connectivity should have monitoring configured. DHA can verify connection status to the NABIDH platform in real time from their own systems. If the EMR loses its NABIDH link due to a technical issue and no one notices, an inspector identifies the outage on the day. The clinic's IT contact should have alerts set for NABIDH connection status.

For mystery patient audit readiness, the patient intake workflow must be applied to every patient without exception: Emirates ID or passport verified at registration, consent documented in the EMR before the consultation, billing codes matched to services actually rendered, and patient rights documentation provided at discharge. If the reception team applies the process selectively (for new patients but not regulars, for instance), a mystery patient audit will capture that gap.

After a DHA inspection, the inspector issues a report specifying each non-compliant finding, the relevant standard from the applicable checklist, and the required corrective action. Two variables determine how the facility should respond: the type of violation (ethical/technical versus administrative), and whether the finding is factually contested.

Findings that involve patient safety require immediate action before the formal corrective action plan arrives. An unlicensed clinician providing treatment, a non-functional fire suppression system, or a broken medication cold chain are findings on which DHA can suspend a license pending correction. The appropriate response is to stop the non-compliant activity and document that step immediately, with the date and action taken, rather than waiting for a written deadline.

Administrative findings (incomplete policy documents, gaps in the waste collection log, a missing consent signature) carry financial penalties but do not typically trigger license suspension. The corrective action plan will specify a remediation deadline for each finding and the format for submitting evidence: photographs, updated contractor agreements, renewed calibration certificates, updated policy documents with signatures and dates.

The appeal window is 30 days from the violation issue date. File an appeal when the finding is factually incorrect, for example when a license was active on the day of inspection but appeared expired in the inspector's system due to a Sheryan data sync delay. Submit supporting documents through the Sheryan portal when filing. DHA processes appeals within 30 working days and updates the violation record accordingly. There is no fee to file.

The facility's complete violation history remains visible on Sheryan to all future inspectors, including resolved violations. A pattern of non-compliance in the same domain across two or more successive inspections (waste management cited twice in 18 months, for instance) signals to DHA that the issue is structural rather than incidental, and subsequent corrective action plans for that domain typically carry shorter remediation timelines and more specific evidence requirements.