IrelandHealth Information Act 2026 Sections 22 and 24, Anonymised Data First and Ban on Re-Identifying Patients in Health Information Obtained by the Health Service Executive
Health Information Act 2026 (No. 10 of 2026), ss. 22(4) and 24(2)
In force since .
A de-identification rule binding government bodies.
- Instrument type
- an act of a legislature
- Obligation class
- Prohibition
What it requires
- If you are the Health Service Executive, do not re-identify or seek to re-identify the patients to whom health information obtained on a request under section 22 of the Health Information Act 2026 relates (Health Information Act 2026 Section 24(2)).
- If you are the Health Service Executive, before requesting health information that relates to personal data under section 22, decide that the purpose of the request could not be met by anonymised or other data that is not personal data (Section 22(4)(a)).
These lines are LexLint's reading of the law's text.
What this law does
The Health Information Act 2026 bars the Health Service Executive from re-identifying, or seeking to re-identify, patients to whom the health information it obtained on a request under section 22 relates. The Executive may not request health information that relates to personal data unless it has decided that anonymised or other data that is not personal data could not meet the purpose of the request. Sections 22 to 24 of the Act came into operation on .
When LexLint raises it
When your app profile says your app handles health records, processes personal data or processes de-identified data.
Back to the example · Lint your app
Page updated .