How health data about you is shared
Health data is shared electronically within the health service and made available to authorised healthcare professionals when they need to view relevant information about your health. For example, if you are admitted to a hospital that you have never been to before, healthcare professionals will quickly be able to look up important information about your health. This can help ensure that you receive the right treatment more quickly if you become acutely ill.
All residents of Norway have national health data. This also applies to children, and refugees when they are issued with a D-number.
When you receive healthcare, information relating to your health and treatment will be entered in your medical records at the place where you are treated. Documents in hospital medical records can be shared with others. This means that, if you subsequently receive treatment somewhere else, documents in your medical records may be made available to healthcare professionals. Each hospital will determine which documents to share.
Sharing via Summary Care Record and Prescription Intermediary
Your health data is shared via the Summary Care Record and Prescription Intermediary. The Summary Care Record is a national health system that shares information with systems used by healthcare professionals. The Prescription Intermediary is a national database for prescriptions used by healthcare professionals and pharmacies.
The Norwegian Directorate of Health is the data controller for the Summary Care Record and the Prescription Intermediary. This means that the Directorate is responsible for ensuring that your data is processed in a manner that safeguards your privacy. If you have any questions about the data that is stored about you beyond what you can see in the service, please contact the Directorate of Health.
View your health data
You need to be logged in to view your health data. It is important that you check that the data that has been recorded is correct and that you report any errors. You can also make your own entries. Ensuring that data is correct is important in case you become acutely ill.
Log in and view your health data
The following health data related to you is shared:
Who has access to view health data?
Only authorised healthcare professionals who require relevant data can access your health data when you attend treatment. Healthcare professionals working at, for example, a hospital, GP surgery, out-of-hours medical service or municipal health and social care services, will be able to access your health data when managing your treatment.
Usage log
You can check who has viewed your health data. The log will state the date, name, event, type of data and the reason why your health data was accessed. It will take a week from the time at which someone accesses your health data until you can see who has accessed the data.
Suspected cases of snooping
If you suspect that someone has viewed your health data without a relevant reason, you need to contact the treatment centre (hospital or GP surgery) or the local authority they work at. If you are not satisfied with the explanation you get from the treatment centre, you can appeal to the County Governor.
When a doctor writes a prescription, this is recorded in the log. The doctor will look at your health data to check whether you have had any reactions to drugs in the past or to check for any other important information of relevance to the drugs you will be taking.
How to configure access to health data
You can restrict healthcare professionals’ access to view your health data. You can also remove your own access to data obtained from the Summary Care Record on Helsenorge or opt out of having a Summary Care Record. For those who have been selected to take part in the Treatment Plan or Digital Health Card for Pregnant Women trials, you can also give or withdraw consent to participate in the trial.
Settings to restrict access
You can choose which data you want to restrict access to. You should note that healthcare professionals may have access to your prescriptions via both the Summary Care Record and Prescription Intermediary. If you want to restrict healthcare professionals’ access to prescriptions, you need to change the settings for prescriptions shared via the Summary Care Record and prescriptions shared via the Prescription Intermediary.