Who Holds the Record · country brief · data as of 2026-10-01Who holds the health record in Romania?
In 2026, Romania scores 56 of 100 on a person's right to see, control and share their own health record: rank 35= of 65 countries, in the Mixed band (45 to 64). Who holds the keys: Shared. Source: Who Holds the Record, SuperTruth, data as of 2026-10-01.
Romania opened a national patient portal on 1 September 2026 with 10 years of history, but the older e-health record was largely empty.
Published · updated · data as of 2026-10-01 · research tool, not legal advice
Can I get my health records in Romania?
Access to the full record scores 60 of 100 in Romania, against a median of 62 across 65 countries. Since 1 September 2026 the CNAS portal eSanatateaMea shows insured people their medical history from the last 10 years and prescriptions from the last 5. Score sits at the bottom of the portal band because the launch is staged and the earlier record was largely empty.
Can I control who sees my health record in Romania?
Control and consent scores 62 of 100 in Romania, against a median of 52 across 65 countries. The law lets patients choose which doctors can open their e-health record, see the full history of doctor access, and refuse the record without losing care. Whether the new portal offers these controls in practice was not verified.
Eight rights, against Cyprus, Czechia, Greece and the EU
| Patient access to the full record20% | 60 | 64 · 60 · 66 | |
|---|---|---|---|
| Patient control and consent20% | 62 | 46 · 64 · 46 | |
| Privacy and security15% | 50 | 58 · 56 · 56 | |
| Connected care journey15% | 60 | 58 · 55 · 62 | |
| Protection from commercial use10% | 56 | 54 · 60 · 62 | |
| Clinician access at the point of care10% | 50 | 55 · 52 · 58 | |
| Research and trial consent5% | 44 | 45 · 45 · 44 | |
| Clinical AI governance5% | 50 | 50 · 50 · 54 |
Black dot: Romania. Hollow dots: Cyprus, Czechia, Greece (scores on the right, same order). Grey line: median of all 65 countries. Dashed teal line: EU median. Overall: Romania 56, EU median 61. Scores move in steps of about 5; gaps of 4 or less are ties.
What would Romania need to change to score higher?
Romania sits in Mixed (45 to 64); Strong starts at 65. The two rights furthest below the 65-country median, weighted, are clinician access at the point of care (50, median 58) and privacy and security (50, median 55). The published rubric reads:
- Clinician access at the point of care: Treating clinicians able to see the full record across providers, under consent and emergency rules.
- Privacy and security: Health-sector enforcement on the record: an independent regulator deciding health-data cases, breach notification and penalties applied.
Which laws give health record rights in Romania?
- General Data Protection Regulation (EU) 2016/679 (2016): Health is special-category data; right of access; fines up to EUR 20M or 4% of turnover.
- Law 190/2018 implementing the GDPR (2018): Limits health-data profiling; bans third-party reuse of public-health data; warning first for public bodies.
- Law 46/2003 on patient rights (2003): Patients have access to their personal medical data; confidentiality of medical information.
Strain and split context, not scored
- Doctors per 10,000
- 37.1 2023
- Nurses and midwives per 10,000
- 83.3 2023
- Private insurance + out-of-pocket
- 23.6% 2023
- Record reaches private care?
- partial
"Sistemul DES este un serviciu public furnizat de CNAS, pentru toţi pacienţii care, potrivit prevederilor titlului VIII, sunt asiguraţi ai sistemului de asigurări sociale de sănătate şi pentru toţi furnizorii de servicii medicale pe toate tipurile de asistenţă medicală, indiferent dacă se află sau nu în relaţie contractuală cu o casă de asigurări de sănătate. Acest serviciu urmează să fie utilizat gradual de la data implementării în sistemul DES a funcţionalităţilor specifice fiecărui tip de asistenţă medicală."
Published stories
- 2026-02-20 · ANSPDCP (National Supervisory Authority for Personal Data Processing) Regulator fines dental clinic after ex-employee took patient files to a rival
- 2025-02-27 · ANSPDCP (National Supervisory Authority for Personal Data Processing) Clinic fined for ignoring a patient's two requests for their own medical file
Questions, corrections or a briefing: supertruth.ai/on-the-record#contact · Full index: whoholds.supertruth.ai