Governance and Business Ethics

We prioritize creating shared value for stakeholders by upholding ethical standards and integrating sustainability. We focus on a responsible value chain, sustainable investments, and supply chains. As a healthcare insurance leader, we enhance services and exceed customer expectations through digital innovations, ensuring excellence and efficiency.


Upholding Business Ethics

we uphold high ethical standards and a culture of integrity. We enforce a Code of Conduct and have a zero-tolerance policy against corruption, fraud, and money laundering, supported by our Anti-Fraud and Anti-Money Laundering Policy. Click here for more details.

Bupa Arabia Code of Conduct

Living our values every day. We help people live longer, healthier, happier lives and make a better world. The Bupa Arabia Code of Conduct sets out what we expect from our people to achieve this. Put simply, it's about living our values every day. It means caring for our customers over the long term, building trust and strong relationships with our communities - and protecting our colleagues, partners, and Bupa Arabia's reputation.

The Code covers the following areas and alongside our values, is a key contributor to Bupa Arabia’s company culture.

Safeguarding Bupa Arabia’s assets:

  • we work to high professional standards
  • we declare conflicts
  • we represent Bupa Arabia
  • we prohibit insider trading and stock tipping
  • we manage risk
  • we protect our intellectual property

Thriving through regulatory excellence:

  • we play by the rules

Adhering to competition laws:

  • we respect competition laws
  • we speak up

Acting ethically and transparently with all our stakeholders:

  • we put our customers first
  • we act ethically
  • we keep information safe
  • we fight money laundering and terrorism financing
  • we know our suppliers

Preserving our community and our environment:

  • we celebrate diversity
  • we stay safe and well
  • we are prepared for anything
  • we take care of our planet

Ensuring every voice is heard

We encourage reporting unethical conduct through the "Speak Up" whistleblowing channel, accessible to all stakeholders. This channel ensures confidentiality and thorough investigations under the Whistle Blowing Policy. The Compliance Department oversees corrective actions, and the Board Audit Committee regularly evaluates the channel's effectiveness, upholding our values and governance standards. To report a violation, please click this here

Anti-Money Laundering

We at Bupa Arabia are committed to participating in the local and international efforts to combat money laundering and terrorist financing, to safeguard our business, clients, and the financial system.


100% of our employees from all levels employees that the organization’s AML policies and procedures have been communicated to.

Sustainable Value Chain

We are committed to building a sustainable supply chain that aligns with our values and the goals of Vision 2030. We prioritize local procurement to support the economy and community development, emphasizing ethical standards and legal compliance. Our procurement policy fosters a diverse supplier base, including local, small to medium-sized enterprises, and female-owned businesses, promoting social equity and economic diversity.

Sustainable Procurement

Additionally, we leverage technology and advanced data analytics to enhance efficiency and sustainability in our procurement processes, underscoring our dedication to responsible sourcing and long-term strategic objectives. To further this commitment, we are conducting workshops aimed at developing our medical providers, with a focus on enhancing local content

Sustainable Investment

We support Saudi Vision 2030 by promoting economic diversification through responsible, Sharia-compliant investments. We avoid unethical industries and integrate sustainability into our investment decisions, aiming to balance financial success with societal benefits. For more details click here.

Customer-centric Innovation and Digital Advancements

As leader in healthcare insurance, we use advanced digital technologies to offer personalized care and improve service delivery. We prioritize customer-centric innovation and have been recognized for our excellent service. Guided by the BSI Kitemark certification, we follow ISO 56002 standards and uphold strict Service Level Agreements. Our initiatives, like automation in healthcare management, enhance efficiency while ensuring strong security practices.

Trusted in Data Privacy

We prioritize creating shared value for stakeholders by upholding ethical standards and integrating sustainability. We focus on a responsible value chain, sustainable investments, and supply chains. As a healthcare insurance leader, we enhance services and exceed customer expectations through digital innovations, ensuring excellence and efficiency.

Building Resilience in the Face of Cyber Security

We take business resilience seriously. We recognize that having a plan is essential to assuring that we can effectively respond to any unexpected situation. We adhere to the required SAMA Cybersecurity Framework V 1.0, dated May 2017, LEVEL 3 MATURITY and SAMA Business Continuity Management Framework V 1.0, dated Feb 2017.It is crucial to have a resilient and robust cybersecurity framework in place to safeguard our assets and data from potential threats and to ensure continuity of business operations. Our commitment to maintaining a safe and secure environment is reflected in our annual Threat Risk Assessment (TRA), which assesses the risks and threats, including Health, Safety, and Environmental (HSE) related risks. The Crisis Management Plan (CMP), including an effective communication plan, is aligned with ISO 22301 and SAMA business continuity management. This plan enables us to respond quickly and effectively, ensuring minimal impact on our customers and stakeholders. All our BCM (Business Continuity Management) champions participated in a tabletop scenario exercise on a yearly basis. This has assisted us in identifying potential gaps in our business continuity plan and working to effectively resolve them. We developed, reviewed, and approved BCPs for all critical departments to assure business continuity in the event of a disruption .

Data Breaches Incidents