Botswana is a country of 2.4 million people with a health system that works, by the measure of a country that has spent its own money on it for sixty years. In the last twelve months that system nearly broke. A public health emergency was declared, a medical airlift arrived from Abu Dhabi, and a pharmaceutical memorandum was signed with India. Then two foreign parties arrived with money, and both stayed.
What they brought, and what they asked for in return, is the subject of this article. The money is the part that was announced. The data is the part that was not. And the data, not the money, is what outlives the contract.
The figure above is the argument of this article in one drawing. Medicines are renewed every year, from the first shipment. A records platform runs for the ten year term. A genomic dataset is different: its value is built once, it is unique to a population, and it outlives the contract that created it. Whatever the contract says about the first two, it is the third that decides whether the country still owns its health system when the contract ends.
Two announcements, one agreement
On 26 August 2026, M42 announced a ten year partnership with the Government of Botswana to strengthen the country's health sector. The announcement named digital health transformation and a national genomics programme as the core scope, with supply of pharmaceuticals and essential medical products alongside. Three days earlier, the Ministry of Health had issued its own statement. It named a different counterparty, Abu Dhabi Health Data Services, and put pharmaceuticals first, with genomics appearing as an avenue for cooperation rather than a headline.
How the two parties described the partnership
| M42 release, 26 August | Ministry of Health statement, 23 August | |
|---|---|---|
| Counterparty named | M42 | Abu Dhabi Health Data Services |
| First item in the scope | Digital health transformation and a national genomics programme | Supply of pharmaceuticals and essential medical products |
| Where genomics appears | Second, in the core scope | After supply, as an avenue for cooperation |
| Term | Ten years | Ten years |
| Financial terms | Not disclosed | Not disclosed |
| Data terms | None published | None published |
Sources: M42 media release, 26 August 2026; Ministry of Health, Botswana, statement of 23 August 2026, as reproduced by YourBotswana; Semafor, 26 August 2026. Shaded cells mark what neither party has published.
The two statements described the same arrangement differently. That is not unusual in itself. What matters is what neither party published. The financial terms were not disclosed. The data terms were not published. Neither statement said where the primary copy of the records would live, who would administer it, what the data could be used for, or what would happen at the end of ten years.
This was not the only foreign party in Botswana's health system. Since December 2025, a United States health memorandum had been running alongside it, funding the exchange of records, laboratory systems and a medical warehouse. That memorandum was not an international agreement, and it carried no legal obligations. But it had a data sharing arrangement attached, and that arrangement ran until reporting was complete, which is to say, for as long as the data existed.
Two foreign parties, one data layer, as announced
United States
memorandum, December 2025
- Funds the exchange, the records, the lab system and the warehouse
- Audit access under Botswana's Data Protection Act
- Not an international agreement; no legal obligations
- Limits published; duration not
Botswana's national health data layer
2028 goal: one unified system
- Health information exchange
- Electronic medical records (OpenMRS, IPMS)
- Laboratory and surveillance systems
- National data warehouse
- National genomics programme
Abu Dhabi Health Data Services
agreement, August 2026
- Operates Malaffi: 3.5 billion records across 12.7 million patient profiles
- Ten years: supply, digital health, genomics, precision medicine
- Legal form and terms not public
Announced areas of overlap, not an established architecture or access map. United States side from the memorandum released under freedom of information, August 2026. Abu Dhabi side from M42 and Ministry of Health releases, August 2026, and the Department of Health Abu Dhabi and WAM on Malaffi.
Twelve months in Gaborone
To understand why these two agreements landed in August 2026, it helps to see the year that preceded them. What follows is a timeline of public events, drawn from news releases, parliamentary records and official statements. The two navy markers are the ones that reach health data.
Twelve months in Gaborone
Sources: Reuters and BBC, 25 to 26 August 2025; WAM, 22 September 2025, and UAE Ministry of Foreign Affairs, 3 October 2025; World Bank, project approved 9 October 2025; Botswana Daily News, 12 November 2025; United States and Botswana memorandum, signed 22 December 2025 by the released text, the Embassy's release gives 23 December, released August 2026; 2026 Budget Speech, 9 February 2026; Botswana Daily News, 10 June 2026; Parliament of Botswana business update, August 2026; Ministry of Health statement, 23 August 2026; M42, 26 August 2026.
The first navy marker is the United States memorandum of December 2025. The second is the Abu Dhabi agreement of August 2026. Between them, a public health emergency, a medical airlift, a World Bank loan, a pharmaceutical memorandum, a national budget that cut the health allocation, and a minister who reported medicine shortages in June, eight months after the emergency was declared. The country was still short of medicine when the ten year partnership was signed.
What the timeline does not show is the structural condition that made these agreements possible. Botswana funds its health system from its own revenue, and it has done so for decades. It is not a country that depends on external donors to keep its clinics open, in the way that Malawi or Zambia do. But in the twelve months shown above, it could not. That is the gap the two foreign parties entered, and it is the reason the terms of entry matter.
What Washington wrote down
The United States memorandum was published, eventually. The text was released under freedom of information in August 2026, eight months after it was signed. It is a short document. It funds the exchange of health records, the laboratory system and a medical warehouse. It provides for audit access under Botswana's Data Protection Act. It is explicitly not an international agreement, and it creates no legal rights or obligations for either party.
What it does not contain is any description of the data sharing arrangement attached to it. That arrangement is referenced, but its text was not released. What is known about it comes from a leaked model specimen sharing agreement and from reporting on similar arrangements with other countries. In that template, data sharing runs for five years, but the text says it continues until reporting is complete. In one reported version, the term extends to twenty five years.
What is written down, and where
| Botswana law, Data Protection Act 2024 | US memorandum, published | US data sharing arrangement | Abu Dhabi agreement | |
|---|---|---|---|---|
| Term | Statute, in force January 2025 | Funding 2026 to 2028; activities to September 2030 | Announced five years; text says until reporting is complete | Ten years |
| Legal force | Binding | Not an international agreement; no legal rights or obligations | Not public | Not published |
| Clinical records and systems | Sensitive data; transfer restricted; a copy must remain in Botswana | Funds the exchange, records, lab and warehouse; audit access under the Act | Not public | Not published |
| Pathogen specimens and sequences | Outside the Act unless linked to a person; benefit sharing policy drafted 2024 | Detection in 7 days, notification in 1; no specimen agreement released | Not public | Not published |
| Human genomic data | Sensitive; impact assessment required; copy must remain | Not addressed; sequencing funding is for outbreak laboratories | Not public | Not published |
| Onward transfer | Restricted unless adequacy, safeguards or derogation applies | Not to third parties without written consent, with limited exceptions | Not public | Not published |
| Secondary use | Purpose limitation applies | Not for other purposes without written consent, with limited exceptions | Not public | Not published |
| Derived products and intellectual property | Not addressed in the Act | Not addressed in the memorandum | Not public | Not published |
| When it ends | Processor terms required, including return or deletion of data | Either side may discontinue; the US may cut funds if co-investment is missed | Not public | Not published |
Sources: Data Protection Act 18 of 2024, Botswana Laws; WHO Botswana, August 2024; United States and Botswana memorandum released August 2026; US Embassy Gaborone, 29 December 2025; M42 and Ministry of Health releases, August 2026. Shaded cells mark what has not been made public.
The matrix above places Botswana's own law, the published memorandum, and the two undisclosed arrangements side by side. Botswana's Data Protection Act, in force since January 2025, is a serious statute. It classifies clinical records as sensitive data, restricts onward transfer, and requires that a copy remains in Botswana. It applies to genomic data. It requires an impact assessment. It says that when a processing relationship ends, the processor must return or delete the data.
The law exists. The question is whether the contracts are written to use it.
How long the money lasts against how long the data claim lasts
Botswana figures from the memorandum text released August 2026 and the Embassy release of 29 December 2025. Template and country terms from Health Policy Watch, the leaked model specimen sharing agreement, and Human Rights Watch, 8 June 2026; none of these is Botswana's own text. Abu Dhabi's data term is not published and is shown without a bar.
The chart above is the central comparison of this article. The money lasts between three and ten years. The data claim, in the one template that has been seen, lasts until reporting is complete, which the text defines as up to twenty five years. The Abu Dhabi data term is not published, and is shown without a bar. A contract that runs for ten years but governs a dataset that outlives it is not a ten year contract. It is a permanent arrangement with a ten year service layer on top.
A country that pays for itself
The reason this matters more for Botswana than it would for a country that has always relied on external funding is that Botswana is not one. The chart below shows external funding as a share of current health expenditure across nine African countries in 2023. Botswana is the navy bar, at 6.5 per cent. Malawi, at the top, is 65.5 per cent.
External funding as a share of current health expenditure, 2023
Source: WHO Global Health Expenditure Database, indicator ext_che, 2023, December 2025 release, as republished by the World Bank. The share measures who paid in a given year; it does not measure whether the money was sufficient or available when needed.
Botswana's health system is not donor funded. It is tax funded, and it has been for sixty years. That is what makes the entry of foreign parties into its data layer a different proposition from the humanitarian programmes that operate in countries at the top of this chart. A country that pays for its own system has something to lose that a donor funded system does not: ownership of the records that system generates.
A country that pays for its own health system has something to lose that a donor funded system does not: ownership of the records that system generates.
What is actually being sold
When a Gulf health platform signs a ten year partnership with an African health ministry, what is being exchanged? The announcement says medicines, digital health and genomics. But the thing that has lasting value, the thing that cannot be reissued or reordered, is the data. Medicines are consumed. Platforms are replaced. A genomic dataset, once sequenced, is unique to that population for as long as that population exists.
This is not a speculative concern. Gulf health platforms have been acquiring and operating health assets abroad for several years, and the map below shows where.
Gulf health platforms abroad: operations, acquisitions and announced partnerships
Operating contracts, partnerships and acquisitions outside the Gulf by the platforms named in this article, as at September 2026. Sources: Estithmar Holding releases on Iraq (April 2024), Misrata (December 2024, handover February 2025) and Algeria (opening now reported for July 2027); M42 releases on Botswana (August 2026) and the Uzbekistan memorandum (Abu Dhabi Media Office, 29 January 2025, which speaks of exploring a build, operate and transfer model, in country capability, knowledge transfer and training; still exploratory in May 2026); PureHealth on Circle Health Group (January 2024) and the Abu Dhabi Media Office on Hellenic Healthcare Group (October 2025). Country outlines from a public domain dataset; positions are approximate.
The map is not a description of either Botswana agreement. It is the context in which those agreements sit. Gulf platforms now operate hospitals in Iraq, Libya and Algeria, hold acquisitions in the United Kingdom and Greece, and have signed memorandums as far as Uzbekistan. The Botswana partnership is the first that puts a national genomics programme in the core scope.
The question is not whether Gulf platforms should operate abroad. They bring capital, operational capability and, in several cases, genuine clinical quality. The question is what the sovereign buyer writes into the contract that governs the relationship, and whether those terms are published.
Who buys what from whom
Where a Nordic governance capability sits in a Gulf led health system partnership: an editorial model, not a description of either Botswana agreement. The five terms are the specification table above; the operator's incentive is the governance summary argued for at the end of this article.
What the last three waves cost
None of this is new. Three previous waves of foreign involvement in national health systems tell the same story, and the lesson in each case is the one Botswana now faces.
Three cases, three lessons
| Case | What was bought | What went wrong, and the number | The lesson for the next contract |
|---|---|---|---|
| Lesotho, 2008 to 2021 | Eighteen year contract to build and run the national referral hospital network | Cost outgrew the budget. Oxfam put the 2013/14 bill at 51 per cent of the health budget; the IFC said 35 per cent, the ministry nearer 30. Terminated in 2021, five years early. | A cost ceiling that moves with the health budget, with an agreed route to reprice, rather than a flat cap. |
| Türkiye, 2017 onward | Twenty five year availability payments for city hospitals | Obligations set largely in foreign currency against revenue in lira. Eighteen hospitals put at USD 10.6 billion generating USD 30.3 billion of payments; later capped at EUR 27.5 billion. | Currency risk allocated explicitly, matched to the currency the health budget is raised in. |
| Iceland, 1998 to 2003 | Twelve year exclusive licence over a national health database | Consent was presumed. In 2003 the Supreme Court upheld a daughter's right to keep her father's records out, finding the Act's safeguards too thin. The database was never built. | A legal basis and safeguards built to survive a constitutional challenge, not only a regulatory one. |
Sources: Oxfam, 7 April 2014, and its response on the contested figures; Government of Lesotho, March 2021; PLOS ONE, 28 September 2022. Türkiye: World Medical Journal, December 2018; Grand National Assembly record, 16 December 2023. Iceland: Supreme Court case 151/2003, 27 November 2003. Lessons are the author's reading.
Lesotho shows what happens when a cost ceiling moves with the health budget but the contract is fixed: the cost outgrew the budget, and the contract was terminated early. Türkiye shows what happens when the obligations are set in a foreign currency against revenue in a local one: the payments are fixed, the currency moves, and the bill grows. Iceland shows what happens when the consent and legal basis for a national health database are too thin: the Supreme Court ruled that a daughter could keep her father's records out, the database was never built, and the exclusive licence lapsed.
Lesotho is the cost lesson. Türkiye is the currency lesson. Iceland is the governance lesson. Botswana is the first country that faces all three at once, with a data layer underneath.
The law that already exists
Botswana does not need to write a new law. It has one. The Data Protection Act 18 of 2024 came into force in January 2025, eleven months before the United States memorandum was signed. It classifies health data as sensitive. It restricts transfer. It requires that a copy remains in the country. It demands an impact assessment for genomic data. It sets out what must happen when a processing relationship ends.
What Botswana needs is not a new statute. It needs contracts that use the statute it has. The law is the floor. The contract is where the terms that the law does not reach, the commercial terms, the intellectual property terms, the benefit sharing terms, are written or left blank.
What Nordic experience can offer
The Nordic countries have spent forty years building something Botswana is now building in ten: a national health data infrastructure, governed by law, operated under permit, and audited in public. They have made mistakes, and they have corrected them. Their experience is not a template that can be copied, but it is a set of practices that can be learned from.
How a Nordic registry decides who gets the data
A model informed by selected Nordic practices, not a uniform Nordic rule. Sources: Maret-Ouda et al., Scandinavian Journal of Public Health, 2017; Danish National Centre for Ethics; Findata; Norwegian REK guidance; Swedish Ethical Review Authority. Practice varies by country and by registry.
The flow above is how a Nordic registry decides who gets the data. An identity number links one person across every registry. The registries hold prescriptions, diagnoses and outcomes. A data permit is required, from the registry holder, every time. Ethics review applies where required. Analysis happens in an approved environment, on approved servers, with extracts leaving only under a permit. And the audit trail is published, yearly, so that the public can see who used what and for what purpose.
This is not a description of a single Nordic system. It is a synthesis of practices from Findata in Finland, the Danish Health Data Authority, Swedish register holders, and the Norwegian REK system. They differ in detail. They share a principle: the country that generates the data administers the data, and every use is approved, recorded and reported.
None of this is beyond Botswana's capacity. It has the law. It has the institutions. What it needs, and what a Nordic supplier can provide inside a Gulf platform's delivery contract, is the design of the controls: the permit flow, the approval environment, the audit trail, and the benefit sharing terms that make sure what the data produces comes back to the health system that generated it.
What a sovereign buyer can write into the contract
| Term | What it says | Where to look |
|---|---|---|
| A permit for every use | No secondary use of records or sequences without a named approver's written permit, project by project, with the register of permits published | Findata in Finland; the Danish Health Data Authority; Swedish register holders |
| Use inside approved environments | Analysis happens on servers the country approves and can audit; individual level extracts leave only under a permit | Statistics Denmark and Findata secure environments |
| An audit trail that is published | Who accessed what, for what purpose, reported to the regulator and summarised publicly each year | Annual reporting by Nordic registry holders and permit authorities |
| Benefit sharing written down | Named returns to the health system from any product, model or patent derived from the data | Botswana's own 2024 draft policy on biological resources; Nordic biobank access rules |
| A transition clause | Records, keys and documentation handed over in a usable form on exit, with continuity of service through the handover | Exit and handover schedules in public IT contracts; Botswana's Public Procurement Act 2021 |
An illustrative set of buyer requirements informed by selected Nordic practices. The package is the author's synthesis, not a description of either Botswana agreement. Practice varies by country and by registry.
Five questions before the next signing
What follows is not a policy recommendation. It is a set of questions a sovereign buyer can ask, and that an operator can answer, before the first genome is sequenced. None of them requires the commercial terms to be published. All of them can be.
Five questions before the next signing
| The question | Why it comes before price | The line an operator can publish |
|---|---|---|
| 1. Where does the primary copy live, and who administers it? | A copy the country cannot administer is an archive, not a system. | Where the data is held, who administers it, and who holds the keys. |
| 2. What may the data be used for, and who approves each use? | Secondary use adds value beyond the clinical purpose, and whoever approves it controls that value in practice. | The permitted uses and the approval route, without the commercial terms. |
| 3. Who owns what the data produces, and what comes back? | This is the price, and it is the one nobody publishes. It cannot be negotiated after the first model is trained. | What is derived, and how benefit is shared. |
| 4. What ends when the contract ends, and what survives it? | Washington's own text runs its data arrangement until reporting is complete, not until the money stops. | What happens at exit: records, keys, documentation, continuity of service. |
| 5. Would the consent and legal basis survive a challenge in the country's own courts? | Iceland shows what happens when the safeguards are too thin. Ask before the first genome is sequenced, not after. | The legal basis, the consent model, and the rights of the people whose data it is. |
Price decides whether a partnership can start. Governance decides whether it can end.
What would change my mind
This article reaches a conclusion: that the price of a health system is no longer money, and that a sovereign buyer that does not write its data terms into the contract will find, at the end of the contract, that it has sold something it did not intend to sell. That conclusion could be wrong. Three tests, set for September 2027, would weaken it.
Three tests, September 2027
| Test | Strengthened if | Weakened if | What that would show |
|---|---|---|---|
| Expansion | A second contract combining service delivery with a national data or genomics responsibility is signed outside the Gulf | No second contract | The near term expansion thesis weakens; the longer term question stays open |
| Execution | Botswana publishes at least one delivery milestone under the ten year agreement | Nothing is published | Delivery cannot be assessed by the standard this article set |
| Governance | Either the American data sharing arrangement or the Abu Dhabi data terms become obtainable by any route | Neither is obtainable | The concern of this article stands whatever happens to the other two |
The tests are independent. The first two can weaken while the third strengthens, or the reverse. This page will be updated in September 2027 with the result of each test, whichever way they go.
If a second country signs a contract that combines service delivery with a national data responsibility, and publishes its terms, the near term concern weakens. If Botswana publishes a delivery milestone, the execution concern weakens. If either the American data sharing arrangement or the Abu Dhabi data terms become obtainable by any route, the governance concern weakens. If none of these happens, the concern of this article stands, and it strengthens with every year that passes without publication.
Price decides whether a partnership can start. Governance decides whether it can end.
The title of this article is a statement, not a warning. The price of a health system is no longer money. It is the terms under which the data generated by that system is held, used, and returned. A sovereign buyer that writes those terms, and publishes them, keeps its health system. One that does not will discover, at the end of the contract, that the most valuable thing it ever produced was the one it never priced.
About the author. Dr Ahmed Talib is a general practitioner with an MSc in Cardiology, Clinical Medical Director at ThinkSono, an AI guided ultrasound company, and Co-Founder and Managing Partner of NordGulf Alliance. He writes on health data governance and cross border health partnerships. No client work is cited in this article.
Interest and sources. NordGulf Alliance advises Nordic and European companies on market entry into the Gulf, which is an interest in the conclusion this article reaches. The author is Clinical Medical Director of ThinkSono, which has commercial conversations in the Gulf. All sources are public documents; no party to either Botswana agreement was approached for comment.
This article is analysis of publicly available information. It does not constitute investment, legal or clinical advice. Figures are current as at 11 September 2026.

