Brazil healthcare digital transformation and data security

Brazil is navigating the cybersecurity and sovereignty challenges associated with the digital transformation of its healthcare system. The transition to electronic medical records and diagnostic systems has increased efficiency but also heightened the vulnerability of sensitive patient data.

To mitigate these risks, the Ministry of Health has announced a move toward a ‘Sovereign Cloud for SUS’ (Unified Health System) in partnership with Serpro. This initiative aims to ensure that data from the National Health Data Network (RNDS), which contains over 5 billion records, is stored and processed within national territory.

Discussions regarding data management have evolved from addressing specific regulatory sanctions—such as those initiated by the National Data Protection Authority (ANPD) following data exposure incidents—to broader structural debates. Experts are proposing a shift from a ‘deposit’ model, where data is held in isolated institutional silos, to a ‘track’ model. This proposed system would allow medical documents to function as objects in circulation, controlled by patients and the SUS, to prevent the concentration of data in vulnerable, static repositories.