Guide
Setting Up a Biotech or Precision-Medicine Company in the UAE
The short answer
A UAE biotech or precision-medicine company answers to more than one authority at once. The Emirates Drug Establishment (EDE) is the federal regulator for medical and pharmaceutical products, devices and clinical or non-clinical trials; the health authority of the emirate where the work happens — Dubai Health Authority (DHA) or the Abu Dhabi Department of Health (DOH) — licenses the facility and the laboratory. The trade licence is the easy part. What decides the route is whether the company touches human samples, genetic data or a product claim, because each of those triggers a separate approval with its own authority and its own pace.
Who decides, and what each gate covers
The EDE was established in September 2023 as the UAE's only federal authority for medical and pharmaceutical products. Its remit covers medical devices, blood derivative products, genetically modified organisms, stem cells, medicated cosmetics and veterinary medicines, and it regulates research and development, clinical and non-clinical trials, drug approval and registration, drug manufacturing, market authorisation, pharmacovigilance, and inspection. Any company whose product, trial or manufacturing activity falls inside that list answers to the EDE regardless of which emirate it is formed in.
Separately, the emirate health authority licenses the physical operation: the facility, the laboratory, and the people who run it. That licence is a precondition to operating, not a formality that follows it. An entity can be fully formed and still unable to open its doors until the facility licence and any required laboratory requirements are in place.
If the company manufactures locally, the UAE Ministry of Industry and Advanced Technology (MOIAT) adds a third layer: industrial registration under Federal Decree-Law No. 25 of 2022, plus conformity and standards certification where the product category requires it. This runs alongside, not instead of, the EDE and health-authority approvals.
What the regulator actually requires
None of these bodies publish a single checklist that covers every model, because the requirement depends on what the company actually does. What is consistent across the sources is the sequence: registration or authorisation precedes the activity, not the other way round. A product cannot be marketed, a trial cannot start, and a facility cannot open before the relevant authority has signed off. The EDE's remit extends to the full lifecycle — approval, manufacturing, market authorisation and ongoing pharmacovigilance — so the obligation does not end at launch; it recurs for as long as the product is on the market.
The written plan carries more weight here than the formation paperwork. It is also the first document a bank, investor or research partner will ask for. Building that plan properly, with every gate named and sequenced, is covered under business plans and documentation.
Genetic and sample data: the layer most biotechs miss
The Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) requires consent before personal data is processed and sets separate conditions for moving data across borders. Health-related information, which covers genetic and sample data, sits inside the category the law treats most carefully. A precision-medicine company handling patient or research-subject genetic material needs a documented consent basis and a cross-border transfer position before the first sample moves, not after a regulator asks for one.
This is a compliance obligation distinct from the EDE and health-authority approvals, and it attaches regardless of where the entity is formed. Treating it as a late-stage legal task rather than a structuring decision is one of the more expensive mistakes in this sector.
Banking and investor readiness
Banks in this sector underwrite the approval story, not the balance sheet alone. Before onboarding begins, have ready: the research or product-development plan, a sample and data-flow map, the laboratory and facility position, the IP and collaboration agreements, and the funding runway to the next gate. The file has to tell one story — the model, the approvals it needs, where each stands, and what covers the cost of reaching the last one. Preparing that file properly is covered under banking readiness; it earns better questions, not a guaranteed account.
Ownership, substance and the roles that must be filled
The entity needs people the relevant authority will actually accept — a facility or laboratory director, qualified research or clinical staff, a named research sponsor — before an application can be approved. Where research funding or investor capital comes from outside the UAE, the source of those funds becomes part of the banking and regulatory file; see source of wealth and funds. Where ownership is split across founders, universities and research partners, fix IP assignment and licensing terms in writing before formation, not as a side letter afterwards — a structuring question covered under regulated and complex ownership setup.
What commonly goes wrong
- Forming the research company before confirming the laboratory or facility licence is realistic.
- Moving samples or genetic data without a PDPL consent and cross-border transfer position already in place.
- Leaving IP ownership between founders, universities and partners to default collaboration terms.
- Marketing a research-use product as a clinical or diagnostic one before EDE market authorisation.
- Manufacturing locally while treating MOIAT industrial registration as optional.
Cost here is layered, not a single number: entity formation, the EDE and health-authority fees that apply to the specific activity, laboratory fit-out, and the recurring renewals behind every approval, not just the trade licence. Velarozone's own fee is itemised in the engagement letter; see how Velarozone works for how the layers are priced.
