Saudi Arabia operates the tightest mandatory health insurance regime in the Gulf, and it is tight in two distinct ways that are worth separating. The obligation on the sponsor is set out in primary legislation and tied directly to the residence permit, so it is enforced through immigration rather than only through employer inspection. And the rules on who may write the cover are narrower than anywhere else in the region, because Saudi Arabia restricts not only the insurer but the reinsurer.
The second point is the one that catches internationally mobile employees and their advisers out. Elsewhere in the Gulf, international insurance capacity reaches the local market through fronting: a locally licensed insurer issues the policy and passes the risk on to an international reinsurer. Saudi Arabia restricts foreign reinsurance, which narrows that route. The consequence is not that international cover has no role — it does, as a second layer — but that the compliance question and the cover question have to be answered separately.
Mandatory health insurance across the Gulf has changed repeatedly, and Saudi Arabia changed the identity of its licensing regulator as recently as 2024. What follows reflects research as at July 2026. Confirm the position with the Council of Health Insurance, the Insurance Authority or your employer before relying on it for a visa, a contract or a compliance decision.
The statutory basis: Royal Decree M/10
The Cooperative Health Insurance Law, adopted by Royal Decree M/10 in 1999, is the foundation. Four of its provisions matter to an expatriate directly.
Scope. Cooperative health insurance extends to all non-Saudi residents and their dependants. It is not limited to employees of large companies or to particular sectors.
Who subscribes. The obligation to subscribe falls on the sponsor, not on the individual. The same law applies the obligation to self-sponsored residents, so investors, business owners and others outside a conventional employment relationship are inside the scheme rather than outside it.
The iqama linkage. Residence permits cannot be issued or renewed without proof of insurance covering the full residency period. This is the provision that gives the regime its force, and it sits in the primary law rather than in an implementing regulation. Cover that expires part-way through the permit period is not sufficient for the purpose, which is why alignment of policy dates to permit dates matters more here than in most jurisdictions. The general pattern — international cover often accepted at the visa stage and rarely at the residence stage — is set out in visa stage versus residence stage health cover.
The gap before inception. The employer bears the cost of treatment until the insurance cover takes effect. That is a deliberate closing of the window between arrival and inception, and it means an employer cannot treat a delayed policy start as the employee's problem.
Who may write the cover
Insurance in the Kingdom must be written by companies registered in Saudi Arabia and operating on the cooperative insurance model, and the cover for a sponsored person must come from the sponsor's registered, approved provider. That is the first gate, and it is the same shape of test applied across the Gulf — an authorisation question rather than a benefits question. The general distinction is set out in admitted versus non-admitted insurance.
What makes Saudi Arabia the hardest case in the region is the second gate. Foreign reinsurance is also restricted. Fronting works elsewhere in the Gulf precisely because the local licensing requirement bites on the issuing insurer while the risk itself can be ceded onward to an international carrier. Restricting the reinsurance side narrows that structure. If you want to understand which entity is actually standing behind a policy in any market, and why the brand on the schedule is often not the risk carrier, see who carries the risk.
The regulator changed on 4 March 2024, and most published guidance has not caught up
This is the single most important currency point in any Saudi health insurance guide, and it is the point on which competing material is most likely to be wrong.
The Council of Cooperative Health Insurance (CCHI) was renamed the Council of Health Insurance (CHI). More significantly, on 4 March 2024 the qualification and licensing of health insurance companies and third-party administrators, together with complaints handling, transferred from CHI to the new Insurance Authority, which had begun operations in late November 2023 and absorbed the insurance functions previously held by the Saudi Central Bank and by CHI.
The editorial consequence is blunt: any guidance still telling you to check the CCHI approved-insurer list is out of date. The licensing register and the complaints route now sit with the Insurance Authority. CHI retains the policy side — the benefits package, the unified policy wording, and accreditation of providers.
For an individual this changes two practical things. If you want to verify that an insurer is licensed, the Insurance Authority is the body to ask. If you have a complaint about a health insurer or a third-party administrator, the complaints route runs through the Insurance Authority rather than through CHI. Regulator changes of this kind also tend to coincide with insurer rebranding and consolidation, the practical handling of which is covered in when your insurer is acquired or rebranded.
What the mandatory policy has to contain
The Unified Health Insurance Policy, with its Essential Benefits Package, sets a standardised statutory minimum that every mandatory policy must meet. Standardisation is the point: the floor is fixed by the regulator rather than negotiated between employer and insurer, so competition between insurers happens above the floor rather than at it.
The package covers consultations, diagnostics, treatment, medicines, hospitalisation, surgery and day-case procedures. Two structural features are worth drawing out, because both cut against the way commercial international cover behaves.
There is no age restriction. Commercially underwritten international plans commonly apply entry age limits and, in some cases, renewal age limits. The Saudi statutory minimum does not work that way, which matters for older workers and for dependants.
Cover ends with employment. This is the feature with the largest downstream consequence, and it deserves a section of its own.
Cover ends with the job — and that is when the risk starts
The statutory position is that the mandatory cover runs with the employment. Resignation, redundancy, retirement and non-renewal therefore end the insurance on the same date they end the income.
The problem this creates is not the gap in itself. It is that the person emerging from the scheme re-enters the market as a new applicant and is generally underwritten afresh. Anything that developed while they were covered by the employer's scheme is, at that point, a pre-existing condition. Group schemes in the international market frequently run on a medical-history-disregarded basis precisely because the group is large enough to absorb the risk without individual questioning — and that basis does not survive the employment. There is no general right to convert group cover into individual cover on equivalent terms.
The sequencing is what makes this manageable or unmanageable. Underwriting options exist while you are still covered — continuity transfer arrangements, in particular, depend on being able to demonstrate unbroken previous cover. They narrow sharply once the previous policy has lapsed. Two guides deal with this directly: medical history disregarded and the group cover cliff sets out why the exposure exists, and leaving your employer's medical scheme sets out what to do about it before the leaving date rather than after. The mechanics of moving insurer without losing accrued continuity are in switching IPMI insurer without losing continuity.
For an expatriate on a fixed-term Saudi contract, this is not a remote risk. It is the ordinary consequence of the contract ending.
Penalties, described structurally
The Cooperative Health Insurance Law provides for penalties, and reporting describes them as having three components:
- Per-uninsured-worker fines, scaled by the size of the establishment. The unit of account is the individual worker left uninsured, not the breach as a whole, so exposure grows with headcount.
- Repayment of the premiums that should have been paid, which removes any saving from non-compliance.
- Possible temporary or permanent loss of recruitment rights. For an employer dependent on hiring from abroad, this is the sanction with real operational consequence, and it is why compliance tends to be taken seriously by employers of any size.
No figures are given here deliberately. The amounts in circulation come from press coverage rather than from the regulators, and the research underlying this guide flags them as unverified. If a specific number matters to a decision you are making, ask CHI or the Insurance Authority. This is a different situation from Dubai, where the penalty range appears in the law itself and can be stated with confidence — see the UAE guide.
Where international cover still does work
None of the above makes international cover pointless in Saudi Arabia. It makes it a second layer rather than a substitute for the first.
The mandatory policy is designed around treatment in the Kingdom, delivered by the approved provider network, for the duration of the employment. It is not designed to move with you, to fund elective treatment outside the country, or to arrange and pay for evacuation to a centre of excellence. Those are precisely the things an international layer is built to do, and evacuation in particular is worth understanding properly rather than assuming — see medical evacuation and repatriation insurance explained. The broader comparison between the two product types, on their own terms, is in IPMI versus local health insurance abroad.
Employers running international assignments into the Kingdom face the same two-layer structure at scale, with the added complication that the local mandatory policy and the international group scheme are usually placed separately and administered separately — the subject of corporate IPMI and international employee health insurance.
What to check before you rely on this
Ask three questions in order. Which entity is the sponsor for iqama purposes, since that determines who carries the subscription obligation. Whether the policy dates cover the full residency period rather than a shorter term, because the statutory test is expressed that way. And whether the insurer is currently licensed, checked against the Insurance Authority rather than against an older CCHI reference.
Then ask the question that has nothing to do with compliance: what happens to your cover on the day the employment ends. That is the exposure the statutory scheme creates and does not solve, and it is the one worth addressing while you are still inside it. The neighbouring regimes, which apply comparable licensing tests with different structures, are covered in Qatar and Kuwait.
Frequently asked questions
Is health insurance genuinely compulsory for expatriates in Saudi Arabia?
Yes, and the obligation sits in primary legislation rather than in administrative guidance. The Cooperative Health Insurance Law, issued by Royal Decree M/10 in 1999, extends cooperative health insurance to all non-Saudi residents and their dependants and places the duty to subscribe on the sponsor. The same law makes proof of insurance covering the full residency period a condition of issuing or renewing the iqama, so the requirement is enforced at the immigration counter rather than only through inspection of employers.
Who has to pay for the cover?
The sponsor. The Cooperative Health Insurance Law obliges the sponsor to subscribe on behalf of the person sponsored, and it also makes the employer bear the cost of treatment during any period before the insurance cover takes effect. That second provision closes the gap that would otherwise open between an employee arriving in the Kingdom and a policy incepting. The same obligations apply to residents who sponsor themselves, so self-sponsored expatriates are not outside the scheme.
Which regulator now licenses Saudi health insurers?
The Insurance Authority. The Council of Cooperative Health Insurance was renamed the Council of Health Insurance, and on 4 March 2024 the qualification and licensing of health insurance companies and third-party administrators, together with complaints handling, transferred from the Council to the Insurance Authority, which had begun operations in November 2023. The Council retains responsibility for policy, the benefits package and accreditation. Guidance that still directs readers to a CCHI approved-insurer list is out of date on the licensing point.
What must a mandatory Saudi policy cover as a minimum?
The Unified Health Insurance Policy, with its Essential Benefits Package, sets a standardised statutory minimum that every mandatory policy must provide. It covers consultations, diagnostics, treatment, medicines, hospitalisation, surgery and day-case procedures. Two structural features stand out. There is no age restriction, which is unusual against commercially underwritten international cover. And the cover ends with the employment, which means the protection and the job terminate on the same date.
What happens to my cover when I leave my job in Saudi Arabia?
It ends. The statutory position is that mandatory cover runs with the employment, so resignation, redundancy, retirement or non-renewal ends the insurance at the same moment it ends the income. Anyone buying individual cover afterwards is generally underwritten afresh as a new applicant, and conditions that arose while covered by the employer scheme can be excluded on the new policy. That sequencing is the reason to look at continuity options before the employment ends rather than after.
Can an international health insurance policy be used to meet the Saudi requirement?
The test is about the insurer, not the benefit schedule. Insurance in the Kingdom must be written by companies registered in Saudi Arabia operating on the cooperative model, and cover for a sponsored person must come from the sponsor's registered, approved provider. Saudi Arabia additionally restricts foreign reinsurance, which narrows the fronting arrangements that let international capacity reach other Gulf markets. Check the current approved-insurer position with the Insurance Authority before drawing any conclusion about a specific policy.
Are there penalties for failing to insure staff?
Yes, and they are structured rather than flat. Reporting describes per-uninsured-worker fines scaled by the size of the establishment, repayment of the premiums that should have been paid, and the possibility of temporary or permanent loss of recruitment rights, which is the sanction with the most operational bite for an employer that depends on hiring from abroad. The specific amounts circulating in press coverage have not been verified against the regulators, so no figures are given here.
This guide is general information only and does not constitute financial, legal, medical or tax advice. Global Investments is not authorised by the Financial Conduct Authority. Insurance products, benefit schedules and premiums are revised regularly, and mandatory health insurance requirements change frequently — in several jurisdictions they are described differently even between official sources. Nothing here is a recommendation of any product or insurer. Confirm the legal position with the relevant regulator or a locally qualified adviser, and confirm cover terms with the insurer, before acting.