Information system register for social welfare and health care
Valvira maintains a public information system database, as referred to in the Act on the Electronic Processing of Client Data in Healthcare and Social Welfare, of information systems intended for the processing, storing and maintenance of client data recorded in social welfare and of patient data recorded in health care. The database also contains details of the client data transfer systems through which a client or patient information system can be linked to the Kanta Services.
The Valvira information system database is an official register containing details of client and patient information systems as referred to in the Act on the Electronic Processing of Client Data in Healthcare and Social Welfare, of pharmacy systems and of client data transfer systems that social welfare and health care service providers are allowed to deploy. If for any information system there are no current details in the Valvira information system database, or if there is a note in the database to the effect that a data security certificate has expired, then social welfare and health care service providers are not allowed to deploy such an information system.
Updated 1.6.2023, in Finnish only.
Details to be entered in the information system database for social welfare and health care
The Valvira information system database for social welfare and health care contains details on:
-
social welfare and health care information systems intended for production use, their purpose and their compliance with essential requirements
-
results of the interoperability testing of category A2 and A3 social welfare and health care information systems
-
validity of the data security certificates issued on the basis of data security audits conducted on category A social welfare and health care information systems
-
significant nonconformities noted in a category A information system in production use, for the duration of the nonconformity
Category A information systems registered by Valvira have passed their category-appropriate certification, in addition to which the information system supplier declares in the registration notification that the information system is compliant with the essential requirements relevant for its purpose. Registration of category B information systems requires that the information system supplier has submitted a written report to Valvira affirming that the information system, when appropriately installed, maintained and used, complies with the essential requirements relevant for its purpose.
Information system suppliers are responsible for entering their systems in the Valvira information system register. For further information on registration, see the page Register an information system.
The information system details entered in the database constitute a crucial information source for the oversight required in the Act on the Electronic Processing of Client Data in Healthcare and Social Welfare. Once an information system supplier has registered a system with Valvira, the supplier automatically assumes the obligations imposed on information system suppliers in the Act on the Electronic Processing of Client Data in Healthcare and Social Welfare.