Development and maintenance of a Kanta-compatible social welfare and healthcare information system

A Kanta-compatible information system must take into account legal requirements, THL regulations and the specifications of the Kanta Services. The systems must also be tested and certified. The Kanta Services are constantly evolving, which also requires regular development of systems that have joined the Kanta Services.

The development of the systems that join the Kanta Services is based on a number of laws and regulations that ensure the secure and consistent processing of data. THL has issued guidelines for information management in the social welfare and healthcare sector.


Among other things, these laws and regulations relate to Kanta

  • the Client Data Act regulates the processing of client data in healthcare and social welfare
  • the Electronic Prescription Act regulates the processing and availability of electronic prescriptions
  • the regulation on the essential requirements of social welfare and healthcare information systems and wellbeing applications, including appendices
  • the EU’s General Data Protection Regulation (GDPR) sets requirements for processing personal data and ensuring data protection in systems
  • future developments will be guided by the European Health Data Space Regulation (EHDS).
Information management in healthcare and social welfare (stm.fi)LegislationInformation management in healthcare and social welfare (thl.fi)Regulations and specifications (thl.fi, in Finnish)

The Kanta Services are a set of nationwide digital services in Finland. The Kanta Services’ data repositories store citizens’ social welfare and healthcare data, enabling smoother care and the management of wellbeing matters. The Kanta Services are used by citizens, both public and private providers of social welfare and healthcare services, and pharmacies.

The Kanta architecture is an essential part of the overall architecture of social welfare and healthcare services, defining common operating models, data content and information system services. The aim is to ensure that client and patient data is processed in a consistent and secure manner. The overall architecture is developed in cooperation with operators in the sector.

One of the foundations of interoperability in social welfare and healthcare services is the national data architecture. THL approves and publishes the national data structures that must be used by the social welfare and healthcare information systems.

Information architecture for social welfare and healthcare (thl.fi, in Finnish)Information management in healthcare and social welfare (thl.fi)What are the Kanta Services?The Kanta architecture

National specifications ensure data content compatibility, open interfaces and secure data transfer.

In cooperation with THL and Kela, nationally binding specifications are produced for social welfare and healthcare information systems that are obliged to join the Kanta Services.

National specifications include the data structure specifications, with which compliance is mandatory.

The THL code service provides information system suppliers with the national data structures they need free of charge.

The technical specifications describe how the information systems must achieve compatibility with the Kanta Services. The technical specifications include interface descriptions, data security requirements and technical guidelines, among other things.

The national functional specifications describe in more detail how the various Kanta Services function in practice and what the requirements are for the systems that join as users. The functional specifications contain descriptions of the functional requirements and processes to be met by the systems.

The common specifications are technical and functional guidelines that apply to several Kanta Services. These ensure that the different systems work together and that data security is properly taken into account. The service-specific specifications for the Kanta Services are detailed specifications of requirements, data content and technical guidelines.

Regulations and specifications (thl.fi, in Finnish)Regulation 5/2024 Annex 1: Guide to the application of essential requirements (thl.fi, in Finnish), in particular Figure 1 on the use of the regulation on essential requirements and the list (p. 3)Code service (thl.fi, in Finnish)Kanta Services specifications

The certification process verifies the compliance of the systems joining the Kanta Services. The certification process ensures that the systems joining the Kanta Services meet the requirements set for them.

The certification process includes joint testing with Kela and a data security assessment with an information security inspection body accredited by Traficom. At the end of the process, the system can be registered on Valvira’s register.

Joint testing is mandatory for systems and wellbeing applications joining the Kanta Services, and the content and scope of testing vary depending on the purpose of the system. The essential requirements are defined in THL’s regulations.

Once the system is certified, it is registered on Valvira’s register. Valvira monitors system compliance. The data are public.

Before production use, the information system suppliers must carry out a deployment test to ensure that the information systems’ connection to Kanta is operational. A deployment test is carried out before the start of production use, for example, when a new system is being deployed or when the classification of a system changes.

Essential requirements and certification of social welfare and healthcare information systems - training, 14 June 2024 (julkari.fi, in Finnish)Essential requirements, certification and social welfare requirements - presentation, 7 February 2025 (julkari.fi, in Finnish)Certification of a new systemJoint testingInformation systems for social welfare and healthcare (valvira.fi)

Information system suppliers are responsible for ensuring that the information systems they produce meet the essential requirements set for them.

Kela organises cooperation meetings and events for information system suppliers to provide support in matters related to development and specifications.

To provide support for system development and interoperability testing, Kela offers a client test service, which includes a client test environment and a production image environment. The services are used for self-testing and during joint testing. Kela also offers support for self-testing, such as test identification numbers. Joining and using the Kanta test environments is free of charge. Each Kanta Service has its own test environment.

Support for testingEvents and trainingCustomer service for system developers

The benefits of the Kanta Services include the smooth flow of data between different operators, nationwide coverage, increased efficiency and resource savings. The development of the Kanta Services will also improve how the social welfare and healthcare service system functions.

The Kanta Services continue to be developed to improve the service and extend its functionalities. Changes and functionality improvements related to continuous improvement also require measures to be taken in the information systems that have joined Kanta. Information system suppliers can track progress by using the publication schedule and service-specific schedules.

Information on development is also shared at events organised by system suppliers. There is usually no need to register separately for these events.

Kanta provides information on any service interruptions and disruption on the kanta.fi website and via email lists. If information system suppliers detect or suspect any disruption related to Kanta, they should report it in accordance with the incident instructions.

Priorities for the Kanta ServicesPublication scheduleEvents and training for system developersDevelopment prospects for health and social services information management (thl.fi, in Finnish)