Sharing of client and patient data in healthcare and social welfare services

Sharing of client and patient data in healthcare and social welfare services

This page contains information on how clients can have a say in sharing their data via the Kanta Services. This can be done by giving consent to data sharing and by issuing denials of consent.

Data sharing within sectors requires consent to data sharing

Client and patient data archived in the Kanta Services is available to the healthcare and social welfare service provider that has saved the data. When another service provider retrieves the data to view via the Kanta Services, it constitutes sharing of data.   

The data can be shared after the client has been informed of the Kanta Services and the client has given consent to data sharing. In addition, viewing of the data via the Kanta Services also requires a client or care relationship.

Information about the Kanta Services The consent to data sharing applies to sharing of data between various service providers within the sector. Therefore, the client must give separate consent to sharing data in the healthcare and social welfare service.

When data that has been created in outsourcing services in the healthcare and social welfare service is transferred between the service provider and the service organiser, it does not constitute sharing of data and therefore does not require the client’s consent to data sharing.

New consent to data sharing replaces old consent in healthcare

The term “consent”, which was previously used in the healthcare service with regard to sharing of data from the Patient Data Repository, will change into “consent to data sharing” after the new Client Data Act has entered into force 1.11.2021. Consent to data sharing corresponds to the old consent in terms of its contents.

If a client has already previously given consent to sharing data from the Patient Data Repository between healthcare service providers, there is no need to request the consent again.

Consent to data sharing in the healthcare service covers all patient data already saved in the Patient Data Repository, as well as data to be saved there at a later date. Consent to data sharing is valid until further notice. If they so wish, the client can withdraw their consent to data sharing.

Consent to data sharing will also be introduced in social welfare services

Sharing of data between social welfare service providers and giving consent to data sharing within the sector will become possible at the beginning of 2023. Until then, client data entered in the client data archive of social welfare services is available only to the service provider that has recorded it.

Consent is required for sharing data between healthcare and social welfare services

In the future, sharing of data will also be possible between social welfare and healthcare services. This requires new kind of consent to be given by the client. Sharing of data between social welfare and healthcare services and giving the related consent will become possible on 1 January 2024. Further information about the new consent will be added in kanta.fi at a later date.

Denials of consent to data sharing

Clients can limit the sharing of their data by setting denials of consent to data sharing. Data sharing can be denied

  • between different service providers in the healthcare service
  • between different registers of the same healthcare service provider 
  • between different service providers in the social welfare service.

Denials of consent to data sharing in the healthcare service

Data for which the client has set a denial of consent to data sharing will not be shared between different service providers or patient registers via the Kanta Services.

The client can specify the denial of consent to data sharing with respect to

  • an individual service event
  • a public healthcare service provider
  • a public service provider’s patient registers
    • public healthcare service
    • occupational healthcare.

In private healthcare services, sharing of data can currently be denied only in terms of individual service events.

Denials of consent to data sharing also apply to data sharing from regional patient data registers.

Denials of consent to data sharing will expand in the future

In the future, clients can also deny consent to sharing the data of a private occupational healthcare register. The denial of consent to data sharing concerning private occupational healthcare services will enter into force at the end of the transition period on 1.1.2024 at the latest.

Denials of consent to data sharing will be deployed in social welfare services after it is possible to share data between different service providers.

A sector-specific comprehensive denial of consent to data sharing, which prevents the sharing of all data between service providers, is also forthcoming.

Instructions on issuing client’s consents to data sharing, consents, or denials of consent to data sharing in the healthcare service

A client can give consent to data sharing or deny consent to data sharing verbally in the healthcare service. A healthcare professional makes a note of the client’s declaration of intent in their own patient data system, from where it is entered in Kanta’s system for issuing declarations of intent.

When the client so requests, a summary of consents to data sharing, consents, or denials of consent to data sharing that the client has given must be printed out for the client. It is not necessary to sign a paper copy of the summary and the service provider need not archive it.  

THL has published more detailed instructions on healthcare operating models that will change as a result of the Client Data Act. You can also see the training recordings concerning the changing operating models.

Read more

Last updated 05.11.2021