In modern healthcare, instant access to accurate, unified clinical data can mean the difference between rapid recovery and delayed intervention. In the Emirate of Abu Dhabi, Malaffi—the region's pioneering Health Information Exchange (HIE)—connects public and private medical facilities into a seamless digital ecosystem. By unifying patient histories across hospitals, clinics, diagnostic centers, and pharmacies, Malaffi transforms healthcare delivery, enhances patient safety, and powers advanced medical research.

Digital Health Integration: Malaffi connects public and private healthcare facilities across Abu Dhabi into a unified, secure Health Information Exchange (HIE).

Table of Contents

• 1. What is Malaffi? (Linguistic Derivation & Purpose)
• 2. Origin, Launch Date & Implementation Timeline
• 3. International Benchmarks: Global HIE Comparisons
• 4. Clinical Outreach, Capabilities & Access Limitations
• 5. Radiological Imaging & PACS Visual Content Access
• 6. Data Export Protocols: Downloading Rules for Doctors & Patients
• 7. Measurable Clinical Benefits & Real-World Impact
• 8. Broader Objectives: MOHAP, DOH & AI Population Research
• 9. Patient Scope: Residents, Nationals, Visitors & Tourists
• 10. Authorization Standards & Clinical Eligibility
• 11. Cybersecurity Protocols & Anti-Hacking Measures
• 12. Patient App Access: TAMM & Malaffi Mobile App
• 13. Physician Onboarding & Malaffi Training Protocols
• 14. Access Interfaces: Portals, Mobile Apps & EHR Integration
• 15. International Access Restrictions: Overseas Usage Rules
• 16. Technical Hospital Infrastructure & EHR Integration Requirements
• 17. Official Government Contact Information & Support

1. What is Malaffi? (Linguistic Derivation & Core Concept)

Understanding Malaffi: Abu Dhabi's Health Information Exchange

Malaffi is Abu Dhabi's Health Information Exchange (HIE) platform, developed to support the secure sharing of relevant patient health information among connected public and private healthcare providers in the Emirate of Abu Dhabi. The name "Malaffi" means "my file" in Arabic. The platform brings together information from participating healthcare facilities to help authorized healthcare professionals obtain a more comprehensive view of a patient's medical history when providing care. It is an important part of Abu Dhabi's digital healthcare infrastructure, but it should not be confused with the entire nationwide electronic health record system of the United Arab Emirates (UAE).

Unlike an individual hospital's Electronic Medical Record (EMR) or Electronic Health Record (EHR) system, which primarily manages information within a particular healthcare organization or its connected network, Malaffi functions as a health information exchange. It enables information from participating facilities to be shared and viewed through authorized clinical systems. This can help healthcare professionals understand previous diagnoses, medications, allergies, laboratory results, radiology investigations, and other relevant clinical information without relying exclusively on records held by their own facility.

Malaffi, Nabidh and Riayati: Understanding the Differences

The UAE has developed connected digital healthcare systems to improve the availability and exchange of patient information across different healthcare providers and Emirates. Although these platforms work toward a common objective of improving continuity of care, they have distinct roles and geographical responsibilities. Understanding these differences is important for healthcare professionals, medical secretaries, health information management staff, nurses, doctors, and other employees working in the UAE healthcare sector.

1. Malaffi — Abu Dhabi

Malaffi is the Health Information Exchange platform for Abu Dhabi. It connects participating public and private healthcare providers across the Emirate and enables authorized users to access relevant patient information through connected clinical systems. Available information may include patient demographics, encounters, diagnoses, allergies, medications, immunizations, laboratory results, radiology reports and images, vital signs, procedures, clinical documents, appointments, and other supported clinical data.

The availability of individual data types depends on the information shared by participating facilities and the implementation of applicable data-sharing arrangements. Therefore, healthcare professionals should not assume that every possible record or investigation is always available in Malaffi. The platform is designed to support clinical decision-making and continuity of care, rather than replace the source healthcare facility's own medical record system.

2. Nabidh — Dubai

Nabidh is Dubai's health information exchange initiative associated with the Dubai Health Authority (DHA). It supports the exchange of health information among connected healthcare providers in Dubai, helping authorized healthcare professionals obtain relevant patient information across participating facilities. Nabidh is distinct from Malaffi, which serves Abu Dhabi, although both contribute to the broader UAE objective of improving healthcare information exchange.

Healthcare professionals working in Dubai should follow their organization's approved procedures for accessing Nabidh through its connected clinical systems. Access to records, available information, and system functionality depend on the relevant platform, participating organization, user permissions, and applicable requirements.

3. Riayati — National Unified Medical Record

Riayati is the UAE's National Unified Medical Record (NUMR) program, overseen by the Ministry of Health and Prevention (MOHAP). It supports the integration and exchange of electronic health information across the national healthcare ecosystem. Riayati is integrated with Malaffi in Abu Dhabi and Nabidh in Dubai, supporting information exchange between connected systems and helping authorized healthcare providers obtain relevant records from participating facilities.

Riayati is therefore the more appropriate platform to reference when discussing the UAE's national unified medical record initiative. However, the existence of national integration does not mean that every record from every healthcare facility is automatically available to every user. Availability depends on connected facilities, participating systems, the information shared, integration arrangements, and authorized access. The precise scope and functionality should be confirmed through official MOHAP, Malaffi, and DHA documentation.

How Malaffi Supports Healthcare Professionals

Malaffi can help healthcare professionals obtain a more complete view of a patient's health information when the relevant records have been shared by connected facilities. This can be particularly useful when a patient receives care from multiple providers, visits a different hospital, or undergoes investigations at a separate diagnostic facility. Having access to relevant historical information may reduce unnecessary repetition of investigations, support medication reconciliation, improve awareness of recorded allergies, and help clinicians understand previous diagnoses and treatments.

For example, a doctor assessing a patient in an emergency department may need to review a previously documented allergy, a recent laboratory result, an existing medication, or an earlier radiology report. Where that information is available in Malaffi and the doctor is authorized to access it, the platform can provide useful context for the clinical assessment. Similarly, a nurse involved in patient care may use available information to support appropriate handover and continuity of care within the scope of their role.

Medical secretaries, health information management professionals, and other administrative personnel may also interact with healthcare systems that connect to Malaffi. Their access and responsibilities depend on their assigned role and organizational authorization. Access to clinical information should always be limited to legitimate professional purposes and the permissions granted by the healthcare organization.

What Information Can Be Available in Malaffi?

According to Malaffi's official information for end users, the platform can display several categories of information received from connected healthcare facilities. These may include:

• Patient demographics: Information used to identify and match the patient to the appropriate medical record.
• Encounters and diagnoses: Records of healthcare visits, documented problems, and clinical diagnoses.
• Medications and immunizations: Available medication history and vaccination records.
• Allergies: Recorded allergy information that can help clinicians assess potential risks.
• Laboratory results: Available test results shared by connected facilities.
• Radiology reports and images: Supported imaging information and associated reports.
• Vital signs and procedures: Available measurements and records of relevant clinical procedures.
• Clinical documents: Supported documents such as discharge summaries, clinical notes, referral notes, and procedure reports.
• Appointments and medical history: Available appointment information and relevant family or social history.
• Other supported diagnostic information: Additional clinical data made available through the platform's implemented integrations and datasets.

Important: This list describes categories of information that may be available; it does not guarantee that every item will be present for every patient. Data availability can vary according to the source facility, the information submitted, implementation phases, and access permissions. When information appears incomplete, healthcare professionals should follow their organization's procedures to verify the record and investigate the discrepancy.

How Malaffi Differs from a Hospital EMR or EHR

An Electronic Medical Record (EMR) generally refers to a patient's digital record within a particular healthcare organization or clinical system. An Electronic Health Record (EHR) is commonly used to describe a broader digital health record that may incorporate information from different healthcare providers. In practice, terminology varies between organizations and jurisdictions.

Malaffi serves a different but complementary function: it enables the exchange and viewing of available health information from connected facilities. It does not mean that every participating hospital has replaced its own EMR with a single identical application. Healthcare organizations may continue to use different clinical software systems, while information is exchanged through approved integration arrangements. Riayati, in turn, supports the UAE's National Unified Medical Record initiative through integration with connected healthcare information systems.

For healthcare employees, the practical distinction is that the source EMR remains important for entering and correcting information in the originating organization's record, while the health information exchange helps authorized users access information shared from other connected facilities. Staff should follow their organization's training and operating procedures rather than assume that all platforms work in the same way.

Patient Confidentiality, Data Security and Authorized Access

Health information is sensitive personal information and must be handled responsibly. Malaffi describes security and confidentiality as important parts of its platform. Access is governed by authorization, role-based permissions, organizational security arrangements, and applicable healthcare information privacy requirements. Access to particularly sensitive information may be subject to additional restrictions and controls.

Healthcare professionals should access patient records only when there is a legitimate professional reason and only within the scope of their authorization. User credentials must not be shared, patient information must not be copied to unauthorized locations, and records should not be viewed out of curiosity or for personal reasons. Healthcare staff should also follow their employer's policies for secure workstation use, authentication, reporting suspected privacy incidents, and handling confidential documents.

Patients can also access available personal health information through services provided by the relevant health authorities. Malaffi identifies Sahatna as a patient-facing gateway through which users can access supported health information and services. The features available to individual patients may depend on the service, eligibility, and the information held in connected records.

What Should Healthcare Professionals Do If Information Is Missing or Incorrect?

Although health information exchanges can improve access to medical history, the quality of the information depends partly on the accuracy and completeness of the records supplied by participating healthcare facilities. Differences in spelling, duplicate entries, outdated demographics, incomplete histories, and information that has not yet been shared can affect what a user sees. A missing item does not necessarily mean that the investigation or treatment never occurred.

If a healthcare professional identifies a possible discrepancy, the appropriate response is to verify the patient's identity and confirm clinically relevant information using the organization's approved procedures. When information originates from the user's own facility, the designated staff should correct it in the source EMR according to local policy. If the information originated from another organization or the discrepancy cannot be resolved locally, the user should contact the appropriate clinical informatics or technical support team and provide the details required for investigation through an approved channel.

Clinicians should not rely exclusively on an information exchange when making clinical decisions. Patient interviews, clinical assessment, current observations, source records, and professional judgment remain essential. Any urgent safety concern should be managed through the organization's established clinical escalation procedures.

Why These Systems Matter for the UAE Healthcare Sector

The integration of Malaffi, Nabidh, and Riayati reflects the UAE's broader efforts to improve digital healthcare infrastructure and information exchange. When relevant records are available to authorized providers, connected systems can support better coordination between healthcare facilities, reduce avoidable information gaps, and help professionals make more informed decisions. The potential benefits depend on reliable data, appropriate implementation, responsible access, and the consistent use of established clinical workflows.

For healthcare professionals seeking employment in the UAE, familiarity with electronic medical records, health information exchange, patient confidentiality, clinical documentation, and data-quality procedures can be valuable professional knowledge. However, the systems used and the training required vary by employer, role, and Emirate. Applicants should review the requirements of the specific healthcare organization and avoid assuming that experience with one platform automatically qualifies them to use another without training.

2. Origin, Launch Date & Implementation Timeline

Malaffi was officially launched in January 2019 under the strategic directive of the Department of Health – Abu Dhabi. The project was rolled out in phased stages to ensure seamless technical onboarding across both public healthcare networks (SEHA) and private healthcare operators:

• 2019 (Phase 1): Initial connection of major public hospital networks (SEHA) and large private hospital groups, establishing core demographic and diagnostic mapping.
• 2020 (Phase 2): Rapid expansion during the COVID-19 pandemic to centralize laboratory testing, vaccination tracking, and emergency bed management.
• 2021–2022 (Phase 3): Near-universal coverage achieved, onboarding standalone outpatient clinics, diagnostic centers, pharmacies, and specialized care facilities.
• 2023–2026 (Phase 4): Full deployment of advanced features, including AI-driven predictive risk models, PACS radiological image viewing, population health analytics, and integration with the UAE Federal National HIE infrastructure (NABIDH in Dubai and Riayati across northern emirates).

3. International Benchmarks: Global Health Information Exchanges

Malaffi aligns with leading international Health Information Exchanges (HIE) and digital health initiatives across Europe and North America:

Country / Region	System Name	Key Functional Parity with Malaffi
United Kingdom	NHS Summary Care Record (SCR)	Centralized allergy, medication, and clinical intervention tracking across NHS trusts.
Estonia	e-Health Record System	Nationwide digital integration connecting 100% of healthcare facilities via citizen IDs.
United States	Epic Care Everywhere / MassHIway	Inter-facility data sharing across regional and private health systems.
Denmark	Sundhed.dk Portal	Unified patient and clinician portal providing full diagnostic history access.

4. Clinical Outreach, Capabilities & Access Limitations

Malaffi provides authorized medical practitioners with a broad clinical scope, aggregating data across 100% of Abu Dhabi’s hospitals and over 98% of all outpatient clinics and medical facilities. Key clinical data points include:

• Patient Demographics & Identifiers: Linked directly via Emirates ID (EID).
• Encounter Summaries: Inpatient admission notes, outpatient consultations, and emergency room visits.
• Diagnoses & Problem Lists: Standardized ICD-10 clinical coding entries.
• Medication History: Active prescriptions, historical dispenses, and dosage schedules.
• Allergies & Adverse Reactions: Critical drug allergy documentation to prevent anaphylaxis.
• Laboratory Results: Hematology, biochemistry, microbiology, and pathology reports.
• Radiology Reports: Diagnostic impressions for X-rays, Ultrasound, CT, and MRI scans.
• Immunization Records: Complete national vaccination logs.

Comprehensive Clinical Overview: Malaffi aggregates vital signs, lab reports, and treatment plans into an organized provider interface.

System Limitations: Malaffi operates as a read-only clinical repository for treating physicians. Doctors cannot write progress notes, alter past diagnostic entries, or issue new prescriptions directly inside Malaffi; all clinical documentation and order entries must be performed within the local hospital’s internal EHR system, which then syncs data upstream to Malaffi.

5. Radiological Imaging & PACS Visual Content Access

Yes. Through Malaffi’s Image Exchange feature (integrated with enterprise Picture Archiving and Communication Systems / PACS), authorized physicians can view actual diagnostic radiological images—including X-rays, Ultrasound, Doppler, Computed Tomography (CT), and Magnetic Resonance Imaging (MRI)—directly within the Malaffi portal viewer.

This capability eliminates the need for patients to carry physical CD-ROMs or film jackets between facilities. Treating radiologists and surgeons can inspect high-resolution DICOM slices from past scans performed at any connected Abu Dhabi facility, drastically reducing unnecessary duplicate radiation exposure and accelerating critical surgical planning.

6. Data Export Protocols: Downloading Rules for Doctors & Patients

To uphold rigid health data governance laws (UAE Federal Law No. 2 of 2019 regarding the Use of Information and Communications Technology in Health Fields), strict rules govern data export:

• Physicians & Clinical Staff: Doctors cannot bulk-download raw database files or export unencrypted patient lists from Malaffi. They may print or save specific clinical summaries (such as a lab trend report) strictly for legitimate medical chart compilation within their licensed hospital environment. Every print or export command is logged in Malaffi’s immutable audit trail.
• Patients: Patients accessing their personal health records via the official mobile app or TAMM portal can view and download official PDF copies of their lab results, radiology reports, immunization certificates, and visit summaries for personal record-keeping.

7. Measurable Clinical Benefits Observed Since Implementation

Since its launch, Malaffi has transformed Abu Dhabi's healthcare landscape, delivering validated clinical and operational improvements:

Key Observed Impact Metrics:

• Reduction in Duplicate Testing: Significant decrease in redundant blood tests and diagnostic imaging procedures, saving patient time and lowering overall health system costs.
• Enhanced Emergency Response: ER clinicians instantly access allergy profiles, chronic disease history, and baseline ECGs for unconscious or non-verbal trauma patients.
• Prevention of Adverse Drug Events (ADEs): Real-time cross-facility allergy and drug interaction alerts protect patients from harmful prescribing errors.
• Streamlined Chronic Disease Management: Diabetics, hypertensive patients, and oncology cases receive coordinated care across public and private specialist networks.

8. Broader Objectives: MOHAP, DOH & AI Population Research

Beyond individual point-of-care consultations, Malaffi serves as a core engine for population health surveillance, strategic healthcare planning, and clinical research overseen by the Department of Health – Abu Dhabi and the UAE Ministry of Health and Prevention (MOHAP):

• Outbreak & Epidemic Surveillance: Provides real-time epidemiologic data to track infectious disease clusters (e.g., respiratory pathogens, dengue) across Abu Dhabi.
• Epidemiological Disease Registries: Constructs comprehensive registries for Diabetes, Cardiovascular Disease, and Cancer to measure disease prevalence and clinical outcomes.
• Advanced AI Risk Prediction: Integrates artificial intelligence algorithms to identify high-risk patients vulnerable to diabetic complications or unplanned hospital readmissions, allowing clinicians to initiate preventive care early.
• Health System Resource Allocation: Guides regional health policy regarding hospital bed capacity, specialist staffing needs, and pharmaceutical supply chain planning.

9. Patient Scope: Residents, Nationals, Visitors & Tourists

Malaffi maintains records for all individuals receiving medical care within the Emirate of Abu Dhabi, regardless of residency status:

• UAE Nationals & Expatriate Residents: Health records are indexed and permanently linked using their unique 15-digit Emirates ID (EID) number.
• Tourists, Visitors & Overseas Patients: Medical encounters for non-residents receiving treatment at licensed Abu Dhabi facilities are created and tracked using their unique Medical Record Number (MRN) paired with Passport and Unified Identification (UID) numbers.

10. Authorization Standards, Clinical Eligibility & Access Controls

Access to Malaffi is strictly regulated by the Department of Health – Abu Dhabi. To qualify for Malaffi credentials, a user must meet all of the following requirements:

1. Hold an active, unencumbered healthcare practitioner license issued by DOH, DHA, or MOHAP.
2. Be actively employed by a licensed Abu Dhabi healthcare facility connected to the Malaffi network.
3. Maintain a valid, verified UAE PASS digital identity credential.
4. Have a legitimate, direct "Treatment Relationship" with the patient whose records are accessed.

Role-Based Access Control (RBAC): Malaffi enforces strict credential checks and automated audit logging for every record lookup.

Strict Access Restrictions: Administrative staff, billing clerks, insurance underwriters, and employers are strictly prohibited from viewing clinical notes. Furthermore, "VIP VIP Privacy Controls" and "Break-the-Glass" protocols automatically trigger security alerts if a clinician looks up records without an active consultation schedule.

11. Cybersecurity Protocols & Threat Defense Infrastructure

Malaffi is engineered to meet military-grade security standards and complies with federal UAE data sovereignty laws:

• In-Country Data Sovereignty: All patient data is stored in tier-IV, highly secure local data centers within the UAE; cloud storage outside UAE borders is strictly prohibited.
• End-to-End Encryption: Data is encrypted using AES-256 standard at rest and TLS 1.3 protocol in transit across all network connections.
• Continuous AI Threat Monitoring: Operating under G42/Injazat security infrastructure, Malaffi utilizes automated Security Information and Event Management (SIEM) systems to detect unauthorized intrusion attempts in real time.
• Granular Audit Logging: Every query, click, view, and document export is permanently timestamped with the clinician's UAE PASS ID, facilitating unannounced regulatory compliance audits.

12. Patient App Access: TAMM & Malaffi Mobile App

Yes. Patients residing in Abu Dhabi can access their personal health records directly through the official TAMM Portal (Abu Dhabi Government Services) or the dedicated Malaffi Health Portal / App.

By logging in securely using their verified UAE PASS, patients can view their comprehensive health timeline, including past medical appointments, lab results, radiology reports, prescription lists, and vaccination records, empowering individuals to take an active role in their health management.

13. Physician Onboarding & Malaffi Training Protocols

Healthcare facilities onboarding new medical staff must follow a structured training and credentialing process:

1. The facility’s designated Malaffi Account Administrator submits the clinician's details and active DOH license number via the Malaffi Provider Portal.
2. The practitioner completes mandatory online learning modules covering health data privacy, HIPAA-aligned standards, and proper system navigation.
3. Upon completing training and verifying their UAE PASS account, the clinician is granted role-based access to the portal or embedded EHR view.

14. Access Interfaces: Portals, Mobile Apps & EHR Integration

Clinicians access Malaffi through two primary technical interfaces:

• Standalone Web Portal: A secure, web-based portal accessed via authorized web browsers using multi-factor authentication (UAE PASS).
• Embedded EHR Solution (Single Sign-On / SSO): Large hospital networks (such as SEHA, Cleveland Clinic Abu Dhabi, and Burjeel Holdings) integrate Malaffi directly within their native EHR software (e.g., Epic, Cerner, InterSystems TrakCare). Clinicians click an embedded "Malaffi Widget" inside a patient's active chart to launch the consolidated record without entering separate login credentials.

15. International Access Restrictions: Overseas Usage Rules

To enforce strict national security and data privacy mandates under UAE health privacy laws, access to Malaffi from outside the geographic borders of the United Arab Emirates is strictly blocked by default.

Physicians traveling abroad or attending international conferences cannot log into Malaffi from overseas IP addresses. In rare, specialized circumstances (such as official international telemedicine consultations or cross-border medical transfer evaluations), specific pre-authorized VPN access tunnels must be formally requested and approved by the Department of Health – Abu Dhabi cybersecurity committee.

16. Technical Hospital Infrastructure & EHR Integration Requirements

For a healthcare facility to integrate with Malaffi, their IT and networking infrastructure must meet specific technical standards:

• Interoperability Protocols: EHR systems must support standard HL7 (v2/v3) and FHIR (Fast Healthcare Interoperability Resources) messaging formats.
• Clinical Vocabulary Coding: Mandatory mapping to international terminology standards, including ICD-10-CM (diagnoses), CPT-4 / ACHHI (procedures), LOINC (lab tests), and RxNorm / UAE Drug Codes (pharmacy).
• Dedicated IP Connectivity: Secure site-to-site IPsec VPN tunnels connected directly to Malaffi's data center gateways.
• Compatibility: Malaffi's enterprise interface engine supports major global systems (Epic, Cerner, TrakCare) as well as custom web-based local clinic management software, provided they pass HL7/FHIR compliance testing.

17. Official Government Contact Details & Support Channels

For official inquiries, facility onboarding, technical support, or public health inquiries regarding Malaffi, contact the governing bodies below:

Department of Health – Abu Dhabi (DOH) / Malaffi Operations

Official Entity: Abu Dhabi Health Data Services LLC (Malaffi)

Physical Location: Department of Health Headquarters, Embassies District, Abu Dhabi, United Arab Emirates

Postal Address: P.O. Box 5674, Abu Dhabi, UAE

Toll-Free Helpline (UAE): 800 555 (Abu Dhabi Government Call Center)

Technical Support Email: support@malaffi.ae | info@doh.gov.ae

Official Portals: https://malaffi.ae | https://www.doh.gov.ae

Conclusion: The Future of Connected Healthcare in the UAE

Malaffi represents a monumental advancement in digital health infrastructure. By unifying patient records across public and private systems, enforcing strict data protection standards, and leveraging AI for predictive health insights, Abu Dhabi sets a worldwide benchmark for Health Information Exchanges.

Whether you are a licensed physician seeking to optimize patient care or a candidate navigating UAE healthcare licensing, mastering Malaffi workflows is essential for clinical practice in the GCC.

Article Author & Editor

Mohammad Ali

Former Medical Secretary & Healthcare Licensing Officer
Burjeel Medical City, Abu Dhabi, UAE | Creator, Gulf Care Careers

Medical Reviewer & Subject Matter Expert

Dr. Kevin Joseph Jerome Borges

Doctor of Medicine (MD) | Professor of Human Anatomy
Ziauddin Medical University, Karachi, Pakistan

Official References and Further Reading

• Malaffi — About the Health Information Exchange
• Malaffi — Frequently Asked Questions for End Users
• UAE Ministry of Health and Prevention — About the National Unified Medical Record (Riayati)
• UAE Ministry of Health and Prevention — Riayati
• Department of Health — Abu Dhabi: Health Information Exchange Standards

Editorial note: Healthcare information systems, technical integrations, and data-sharing arrangements may change. Readers should consult the relevant health authority or their employer's official guidance for the latest operational requirements.

Educational & Informational Disclaimer: This article is published exclusively for educational, career guidance, and informational purposes for the healthcare community and the general public. It does not constitute official legal advice, formal medical guidance, or official regulatory policy from the Department of Health – Abu Dhabi or Malaffi.

Non-Affiliation Disclaimer: Gulf Care Careers is an independent professional guidance portal. This platform is not formally affiliated with, endorsed by, or sponsored by Abu Dhabi Health Data Services LLC, Malaffi, the Department of Health – Abu Dhabi (DOH), or MOHAP. All trademarks, portal names, and government entities cited belong strictly to their respective official owners.