Brazil digital health transformation faces cybersecurity risks

The digital transformation of healthcare in Brazil is increasing efficiency but introducing significant cybersecurity risks. As medical records, prescriptions, and diagnostic systems move to electronic formats, the vulnerability of sensitive patient data grows, potentially impacting direct patient safety and service continuity.

To address data sovereignty, the Ministry of Health announced a move toward a 'Sovereign Cloud for SUS' (Unified Health System), utilizing the National Health Data Network (RNDS), which already contains over 5 billion records, in partnership with Serpro. This strategy aims to ensure public health data is stored and processed within national territory.

Regulatory scrutiny is also increasing. The National Data Protection Authority (ANPD) has initiated sanctioning processes against organizations like the Instituto Saúde e Cidadania (Isac) following incidents involving the potential exposure of sensitive data belonging to approximately 500,000 patients. These developments highlight the tension between the benefits of digital clinical documentation and the necessity of robust cybersecurity infrastructure.