Fundació Puigvert becomes the first entity in the health system of Catalonia certified specifically in health cybersecurity

La Fundació Puigvert esdevé la primera entitat 
del sistema de salut de Catalunya certificada específicament en ciberseguretat sanitària.
  • This is the first center of the Public Health System of Catalonia (SISCAT) accredited with the Specific Compliance Profile for the Health sector (PCE-HEALTH), corresponding to the medium category of the ENS. The Cybersecurity Agency of Catalonia, which acts as the Technical Audit Body (OAT) since 2023, has been responsible for certifying this profile.
  • The received certificate certifies and demonstrates the firm commitment of Fundació Puigvert to the protection of medical data and validates that the hospital meets the specific security standards required for the health sector by public administrations.

 

Barcelona, March 9, 2026. Fundació Puigvert is the first public healthcare center to achieve certification of compliance with the Specific Compliance Profile for the Health sector. The Cybersecurity Agency of Catalonia (ACC), the body responsible for ensuring the digital security of citizens, has granted this endorsement acting as the Technical Audit Body.

 

This accreditation guarantees that the information systems of the Foundation meet the digital security standards required by public administrations, specifically in the Health field (PCE-Health), regarding the security of information systems and the protection of critical data, such as clinical and personal data of patients and professionals.

Secure, reliable, and controlled data protection

The received ENS certificate certifies that Fundació Puigvert protects data securely, reliably, and in a controlled manner, ensuring:

  • Confidentiality: Only authorized persons have access.
  • Integrity: Data is not improperly modified.
  • Traceability: It is possible to know who accessed the information and when.
  • Authenticity: The identity of users is verifiable.
  • Availability: Systems are operational whenever necessary.

 

A comprehensive assessment

To achieve this certification, the hospital has passed a comprehensive audit that evaluates 54 security measures. In practice, these measures translate into more than 200 controls and specific actions that cover technical, organizational, and information management aspects.

 

This accreditation has been obtained thanks to the impetus of the General Directorate from the Information Security Committee, and the contribution of a multidisciplinary team led from Information Systems, which has also involved the legal and healthcare areas. The delegated trustee and general director of Fundació Puigvert, Ramon Massaguer, has expressed his pride and gratitude for the effort made by all these teams to achieve this demanding milestone, and for the fact that “this accreditation reinforces Fundació Puigvert’s commitment to quality, safe, and person-centered healthcare,” in a context where the digitalization of health makes it essential to ensure the protection of information.

 

More information about the ENS: https://ens.ccn.cni.es/ca/inici