SPAIN CONTEXT
Artificial intelligence in medicine in Spain
Artificial intelligence for doctors in Spain can help prepare documentation, organize medical history, and consult evidence. Its use must respect the medical record and professional control.
The Spanish context combines a common state framework, systems managed by the autonomous communities, and the exchange of certain documents through the HCDSNS.
Spain Spain
Clinical history: Law 41/2002.
Minimum reports: Royal Decree 1093/2010.
Exchange: Electronic Health Record of the SNS.
Health data: special category under the GDPR.
What clinical documentation must preserve in Spain
The Law 41/2002 defines the medical record as the set of documents concerning the patient's condition and evolution. Its main purpose is to facilitate care and maintain truthful and up-to-date information.
| Integration | The documentation must gather, at least within each center, the relevant information of the care processes. |
| Professional identification | It must be possible to know which doctors and other professionals were involved in each episode. |
| Healthcare content | Anamnesis, examination, evolution, orders, tests, interconsultations, and reports are incorporated when applicable. |
| Security and conservation | Each center must archive the medical record in such a way that it can be preserved, retrieved, and protected. |
| Limited access | Professionals and staff access according to their role; the duty of confidentiality accompanies access. |
An AI tool can accelerate the preparation of a report, but it does not determine on its own which information is clinically significant. The Spanish guide on clinical documentation with AI offers a practical checklist to review content and workflow.
FRAME OF SPAIN
A common framework with interoperable autonomous systems
Spain does not have a single centralized medical record that replaces the regional health services. State regulations define minimum rights and content; each health service retains its systems, and the HCDSNS facilitates access to certain documents.
Law 41/2002
Regulates patient autonomy, information, and clinical documentation in public and private facilities.
Royal Decree 1093/2010
Define the minimum dataset for clinical reporting and favors readability and semantic interoperability.
HCDSNS
It allows consulting certain documents generated by health services when the patient receives care outside of their community.
GDPR and LOPDGDD
They impose enhanced protection for health data, liability, and appropriate technical and organizational measures.
University and high-complexity hospitals in Spain
The National Health System distributes high complexity among autonomous communities and university hospitals. Among the reference centers for care, teaching, and research are:
La Paz University Hospital
Madrid. Public university hospital with multiple referral areas and high complexity.
Hospital Clínic Barcelona
Barcelona. University hospital with specialized care, biomedical research, and training.
Vall d'Hebron University Hospital
Barcelona. Public hospital campus with healthcare, teaching, and research activities.
12 de Octubre University Hospital
Madrid. High-complexity public hospital for teaching and research.
Non-exhaustive selection of reference institutions. This is not a ranking nor does it indicate affiliation with Itaca.
Local clinical history, standardized reports, and HCDSNS
Interoperability shares specific documents; it does not convert all regional and hospital systems into a single database.
| Element | Main function | Responsibility |
|---|---|---|
| Medical history | Complete set of documentation kept by the health center or service. | The local manager controls the archive, access, quality, and preservation. |
| Normalized report | Document such as discharge summaries, emergency care, primary care, outpatient consultation, or summarized medical history with defined minimum data. | The professional and the center guarantee content and authorship. |
| HCDSNS | Service that allows locating and consulting certain documents among regional government services. | It does not necessarily show all the available information in each source system. |
What to review when incorporating AI into a healthcare facility
The initial analysis is not just technical. The institution must define the purpose of the tool, what data it processes, who reviews the result, and how it is recorded in the medical record.
Health data receives enhanced protection. Furthermore, a function intended for diagnosis or decision support may be subject to different requirements than a purely documentary function. Classification depends on the intended purpose, not on the generic use of the word AI.
Scope: Regional regulations, health service policies, applicable European regulations, and the contractual obligations of the facility must also be reviewed.
Five questions to evaluate a tool
- Is the purpose of the tool defined in writing?
- Can the professional review, correct, and reject the output?
- Are accesses and changes logged?
- Does the result enter the correct autonomic or institutional system?
- Did data protection and security review the workflow?
Where AI can contribute to Spanish clinical practice
In environments with high workloads and multiple systems, AI adds value when it reduces repetitive drafting and improves access to context without creating duplicate documentation.
Clinical reports
Prepare consultation, progress, discharge, or summary drafts for professional review.
Normalization
Help apply shared structures and terminologies in interoperable documents.
Evidence
Synthesize medical sources for specific questions and display references.
Continuity
Organize background information to retrieve relevant data across episodes and specialties.
AI does not solve interoperability, document quality, or data protection on its own. It is a support layer that must fit into the institution's controls and systems.
ITHACA IN SPAIN
Itaca prepares clinical drafts. Your center keeps the official record.
Itaca helps turn conversations, documents, and quick notes into structured clinical drafts. It also allows working with templates and longitudinal context depending on the contracted functions.
The professional reviews and approves the content. The center retains responsibility for the history, data protection, custody, and integration with its systems.
Official sources for further reading
- Law 41/2002: patient autonomy and clinical documentation.
- Royal Decree 1093/2010: minimum data for clinical reports.
- Digital Medical Record of the National Health System.
- Legal basis for the processing of health data in the HCDSNS.
- Security and privacy in clinical notes with AI.
Editorial and source review: Itaca team. Updated: September 11, 2026. This content is informational and does not replace legal, regulatory, or security advice. Always verify the current version and the obligations applicable to your institution.
Frequently asked questions about medical AI in Spain
Does HCDSNS contain a patient's entire medical history?
No. It facilitates access to certain documents; each health service retains additional information in its source systems.
Do clinical reports have a common minimum content?
Yes. Royal Decree 1093/2010 establishes minimum data for various types of reports of the National Health System.
Can AI decide what goes into the medical record?
No. The professional must review the draft, and the center controls its entry into the official registry.
Is the regulation identical in all autonomous communities?
There is a common state framework, but each region and health service may have its own rules, systems, and procedures.
Explore other national contexts
Compare how the medical record, data protection, and interoperability change between countries.