Since 19 October 2012 Italy’s Electronic Health Record has a primary-rank legal basis: Article 12 of decree-law 18 October 2012, no. 179 (Further urgent measures for the country’s growth), published in the Official Gazette no. 245. The provision defines the Fascicolo Sanitario Elettronico (FSE, Electronic Health Record), assigns its establishment to the Regions and Autonomous Provinces, and defers its contents, security measures and interoperability criteria to an implementing decree that has not yet been issued.

Context

Before DL 179/2012 the FSE lived as a regional initiative. Lombardy through the SISS system, Emilia-Romagna, the Autonomous Province of Trento and Tuscany had each started their own implementations, with technical choices and consent models that differed from one another. National direction came from two non-legislative acts: the Guidelines on the Electronic Health Record and the health dossier issued by the data protection authority, the Garante (16 July 2009), and The Electronic Health Record — National Guidelines, agreed in the State-Regions Conference on 10 February 2011 and published in the ordinary supplement to Official Gazette no. 50 of 2 March 2011.

These acts gave direction but did not bind uniformly. A Region could depart from them without breaking any law, because there was no law. The result was a set of regional records that were technically incompatible, with data that stopped at the border of the Region where it originated.

What Article 12 establishes

Paragraph 1 defines the FSE as “the set of digital health and socio-health data and documents generated by present and past clinical events concerning the patient”. The definition turns on the document: the record is a container of documents produced by clinical events, not a data model structured at the level of the individual observation.

Paragraph 2 lists three distinct purposes: prevention, diagnosis, treatment and rehabilitation; medical, biomedical and epidemiological study and research; health planning, quality-of-care audit and assessment of care. The distinction is not descriptive: it sustains different consent regimes, because access for purposes other than care requires safeguards beyond those for the feeding of the record by providers within the National Health Service.

Establishment falls to the Regions and Autonomous Provinces. The legal model is therefore federated: the national rule sets the frame, while ownership of the processing and concrete operation stay with the Regions. That choice conditions every later discussion of interoperability, because there is no single national record but N records that have to speak to one another.

The deferral to the DPCM

The most important part operationally is what the provision leaves unsaid. Paragraph 7 hands to a decree of the President of the Council of Ministers (DPCM) — after consulting the State-Regions Conference, the Garante and the Agency for Digital Italy (AgID) — the rules on FSE contents, coding systems, security guarantees and measures, access methods and levels, consent management and interoperability criteria.

Everything that makes a record technically constructible and interoperable is thus deferred to a secondary act not yet adopted. As of today the DPCM does not exist. Without its content there are no mandatory document profiles, no document metadata model, and no indexing infrastructure that would let one Region locate a document produced in another. The law declares the right; the rules that make it uniformly exercisable remain suspended.

Resting on the CAD

On the document side the FSE is not born into a vacuum. It rests on the Digital Administration Code (Legislative Decree 7 March 2005, no. 82, CAD), which governs the electronic document, the digital signature and compliant preservation. A report placed in the record is an electronic document under the CAD: it must be digitally signed by the professional who produces it and preserved according to long-term retention rules.

This anchoring imposes a technical constraint that comes before clinical interoperability. Before exchanging the content of a report, two systems must share a model of a signed, preserved document that stays verifiable over time: the signature must stay validatable, the timestamp must hold, the preservation format must not degrade legibility. The CAD supplies that base, and the FSE inherits it together with its obligations.

On governance, 2012 also reshaped digital administration: decree-law 22 June 2012, no. 83 (converted by Law 134/2012) established AgID as successor to DigitPA. Article 12 names AgID, alongside the Ministry of Health, as the technical hub for the future writing of the rules.

The consent structure is not an invention of Article 12: it comes from the 2009 Garante guidelines. The model separates consent to the feeding of the record from consent to consultation, the latter referring to individual data controllers — general practitioner, pharmacist, hospital — and accompanied by the ability to obscure specific clinical events, with the obscuring itself not visible to whoever accesses the record.

Translating this model into architecture takes work. Granular obscuring that hides even itself means holding documents whose very existence, in certain access contexts, must not surface: a confidentiality property that bears on the design of indexes and access logs, not only on application-level controls. Article 12 anchors this model in law and again defers its technical specification to the DPCM.

Surveillance systems and registries

Alongside the FSE, Article 12 provides for surveillance systems and disease registries for prevention, planning and research, likewise established by DPCM. It is a less visible part of the provision, but with structural effects on regional health information flows and their coordination with the Ministry of Health’s New Health Information System. Registries and the record share the same underlying problem: aggregating locally produced data under national rules that, for now, are still unwritten.

Limits

The open technical question is single and precise: interoperability is stated as an objective but not yet built. It needs shared document profiles — the Italian localisation of HL7 CDA R2, already under way for documents such as the Hospital Discharge Letter, is the natural candidate — and an indexing infrastructure able to find and retrieve documents across different Regions. Neither exists in binding form until the DPCM is issued.

There also remains the gap between the rule and regional implementation: Article 12 obliges Regions to have an FSE, but the maturity of regional initiatives is highly uneven, and aligning to still-unknown technical rules will mean rework for those who have already invested in their own models. How long the distance between the declared right and its uniform exercisability stays open will depend entirely on the quality and timing of the implementing act.

https://www.gazzettaufficiale.it/eli/id/2012/10/19/012G0201/sg https://www.garanteprivacy.it/home/docweb/-/docweb-display/docweb/1634116 https://www.normattiva.it/uri-res/N2Ls?urn:nir:stato:decreto.legge:2005-03-07;82 https://www.fascicolosanitario.gov.it/portale/en/norme-e-atti https://www.noze.it/en/insights/fse-cad-art12-nascita/

Cover image: Exterior facade of Palazzo Chigi in Rome, a historic light-stone building with cornice and regular windows, seat of the Italian… — photo by James Gose, CC BY 2.0 — https://commons.wikimedia.org/wiki/File:Palazzo_Chigi_-_Roma_(2010).jpg