Written answer
Data Protection
The Department monitors HSE reliance on non-EU digital providers, prioritising security, resilience, interoperability, legal compliance and value for money in procurement.
3328. Deputy Pádraig Rice asked the Minister for Health if her Department has assessed the extent of the Health Service Executive's dependence on non-EU providers for critical digital health infrastructure, including cloud, data hosting, electronic health record programme, interoperability and related digital health services; and if she will make a statement on the matter. [55809/26]
Comment on this
The delivery of digital health services in Ireland involves a range of technology providers and service models supporting cloud services, data hosting, interoperability, cybersecurity, clinical systems and other digital infrastructure.
Officials in my Department work very closely with the Technology & Transformation Division within the HSE and as such, are very much aware of the extent to which the Health Service Executive's are reliant on non-EU providers for critical digital health infrastructure. As such, my Department keeps developments in digital infrastructure, cybersecurity, data governance and digital resilience under ongoing review as part of the implementation of Digital for Care: A Digital Health Framework for Ireland 2024–2030.
The Department and HSE recognise the importance of ensuring that critical digital health infrastructure is secure, resilient and compliant with applicable legal and regulatory requirements, including the General Data Protection Regulation (GDPR), cybersecurity obligations and emerging European legislation such as the European Health Data Space and the AI Act. Ireland also participates in a range of European and international forums on digital health, health data and AI, which help inform national policy and implementation approaches.
In progressing major national programmes, including the National Electronic Health Record Programme, consideration is given to a broad range of factors including cybersecurity, operational resilience, interoperability, governance, vendor capability, value for money and compliance with Irish and EU law.
Procurement decisions relating to digital health infrastructure are undertaken in accordance with public procurement requirements and are assessed on the basis of the specific needs of the health service.
The Department and HSE will continue to monitor evolving European policy and technology developments to ensure that Ireland's digital health infrastructure remains secure, resilient and aligned with international best practice.