Every Dubai clinic collects consent forms. Far fewer collect forms that would actually stand up if a patient complaint reached the DHA or a case reached the Medical Liability Committee. The gap between "we had them sign something" and "we can show the patient was properly informed" is where clinics get hurt.

This guide covers what a patient consent form has to contain under UAE and DHA rules, when written consent is mandatory, how long it lasts, who is allowed to sign, and the mistakes that come up most often. It also links to downloadable, editable templates for specific procedures. At Oryx we work with clinics across the UAE on exactly this, so the aim here is a genuinely useful reference, not a sales page.

Three layers of rules apply.

Federal Decree-Law No. 4 of 2016 concerning Medical Liability is the top of the stack. It prohibits treating a patient without consent, except in emergencies where consent cannot be obtained or where a contagious disease threatens public health. It also requires the practitioner to keep the patient, or whoever gives consent, informed of all complications that may result from diagnosis or treatment, in a clear and simplified manner. The executive regulations of the Medical Liability Law add detail on how this works in practice.

The DHA Guidelines for Patient Consent (reference DHA/HRS/HPSD/GU-05) turn the law into operational requirements for every DHA-licensed facility. This is the document your clinic will be measured against on inspection, and most of what follows comes from it.

The guidelines describe three types of consent:

  • Written consent, where the patient signs because the treatment carries significant risk. This is what people mean by "informed consent" and "the consent form".
  • Verbal consent, where the patient states agreement to a treatment that does not carry significant risk.
  • Implied consent, where the patient cooperates with the procedure, for example holding out an arm for a blood test.

The rest of this guide is about written consent.

The DHA guidelines list the situations that need a written consent form, including:

  • Pre-operative assessment
  • Surgical or invasive procedures
  • Anaesthesia and sedation
  • Use of blood and blood products
  • Chemotherapy and radiation therapy
  • Interventional procedures such as endoscopy, and any other high-risk procedure or treatment
  • Telehealth services
  • Any care where students are involved
  • Dentistry services, where the consent must include the proposed treatment, potential risks and benefits, alternative expected outcomes, and relevant costs

The guidance also includes a long appendix of example procedures that require consent, from cardiac catheterisation to intra-articular injections. The practical rule for a clinic: if a treatment carries a real risk of harm, or is irreversible, or costs the patient money out of pocket, it needs a written form.

The DHA sets a minimum content standard. A compliant consent form includes:

  • Patient identification: full name as per passport or Emirates ID, age, gender, and patient identification or file number.
  • The name of the proposed procedure or treatment, specifically, not a broad category.
  • A description of the procedure and what will happen, step by step, and whether it is an established or a newly introduced technique.
  • Side effects, risks, complications and discomforts, with an explanation of what care is available if harm occurs and who pays for it.
  • Benefits, limited to the benefits that are actually expected.
  • Alternatives, including the established standard treatment and the option of no treatment.
  • Financial implications: anything not covered by insurance, and any co-payment the patient is responsible for. All costs must be disclosed before the procedure starts.
  • Confidentiality: how the clinical team protects the patient's data.
  • The right to refuse or withdraw treatment at any time without affecting other care.
  • A patient consent statement in the first person, confirming the patient read the information, had questions answered, and consents voluntarily.
  • Signatures: patient (or next of kin), a witness or interpreter where used, and the treating practitioner's declaration that they explained the procedure, risks and alternatives and answered questions. Each signature carries a name, date and, for the practitioner, the time.

Two formatting rules that inspectors do check: forms must be available in Arabic and English, and abbreviations are not permitted when documenting on consent forms.

The generic risk of a weak form is that it lists nothing specific. "I understand this procedure carries risks" tells a reviewer almost nothing. A form that names the actual complications of the actual procedure, in plain language, is what demonstrates informed consent.

A signed informed consent form is valid from the moment the patient signs until the procedure is performed, up to a maximum of 30 days from the date of signature, as long as the patient's condition has not changed.

Consent becomes invalid, and a new form is required, if:

  • The patient withdraws consent.
  • Reassessment shows the patient's condition or diagnosis has changed.
  • The consented procedure is changed or modified.

Some treatment types have their own rules. Consent for a course of chemotherapy or radiotherapy covers the whole course unless the plan changes. Consent for blood transfusion is per episode, extended to a year for patients needing multiple transfusions if their condition is stable.

Who can sign

  • A competent adult (18 or over) is presumed capable of consenting for themselves.
  • A married woman signs her own consent, except for procedures related to reproductive health, where the husband's consent (first priority) or the legal guardian's consent is required.
  • For a minor or an incompetent patient, consent comes from the next of kin, following the priority order set out in the guidelines (relatives up to the fourth degree). For a minor of divorced parents, the parent with custody consents, though the other parent has a right to information.
  • If no next of kin can be reached for a minor or incompetent patient despite reasonable efforts, the most responsible physician signs and another healthcare professional witnesses.
  • A patient under the influence of sedatives or analgesics that impair understanding cannot give valid consent; it must come from the next of kin, or the consent may later be deemed invalid.

The DHA guidelines explicitly accept electronic consent. An electronic version of the form is an acceptable way to obtain consent, and for clinics using electronic health records an electronic signature is acceptable. The conditions: the electronic form must meet the same content requirements as a paper one, and the system must store each entry with identified authentication so it can be retrieved and attributed later.

This matters because a tablet-based consent flow, done properly, is usually more defensible than paper. It timestamps the signature, it can force the patient through the information before the signature field unlocks, and the signed copy cannot be misfiled.

Photography and marketing

This is a common failure point in cosmetic clinics. Any use of a patient's pictures, images or video for social media or advertising requires a separate written consent, taken on its own form, not folded into the treatment consent. This follows from the DHA guidelines and the DHA rules on medical advertisement content on social media.

  • One generic form for everything. The guidelines require a specific form per procedure. A single "consent to treatment" sheet does not meet the standard for a surgical or dental procedure.
  • Signature collected too late, after preparation or sedation has begun.
  • No Arabic version.
  • Vague risk wording that names no specific complication.
  • No alternatives listed, especially the "no treatment" option.
  • Costs not disclosed on the form before the procedure.
  • Expired consent, with treatment carried out more than 30 days after signature without re-consenting.
  • Photography consent bundled into the treatment form.
  • The signed form never scanned into the patient record, so it cannot be produced on request.

We publish editable, bilingual templates for specific procedures, each built around the DHA content standard and adapted to the real risks of that treatment:

More are being added. Each template is a starting point: your clinic still needs to adapt the wording, pricing and risk detail to its own practice and have it reviewed.

Oryx Medical AI is a clinic management system (EMR) built for Dubai clinics, and it handles consent forms comprehensively.

Oryx uses a purpose-built AI model to automatically draft procedure-specific consent forms, using your clinic's own context: the exact procedure, the materials, your pricing, the alternatives your practitioners offer, etc...

Rather than leaving you with a generic template, Oryx Medical AI writes the consent forms to DHA standards, in English and Arabic, and supports electronic signatures.

The outcome is that every patient has a strong, specific, signed consent form behind their treatment, protecting all parties from legal liability.

If your clinic's consent process a stack of paper, or isn't protecting properly you against legal liability, reach out to our team, and we'll show you how Oryx makes it easy and automatic!