Telehealth Regulation

Croatia

Is the use of telehealth permitted?

Yes. Telehealth, in particular telemedicine ("Telemedicine"), defined as the provision of healthcare services at a distance (i.e., when a healthcare worker and a patient or two healthcare workers are not in the same location) by using information and communication technologies, pursuant to Article 38 (1) of the Croatian Healthcare Act (Zakon o zdravstvenoj zaštiti – "Healthcare Act") and Article 2 (1) no 1 of the Croatian Ordinance on conditions, organisation and manner of performing telemedicine (Pravilnik o uvjetima, organizaciji i načinu obavljanja telemedicine – "TelemedicineOrdinance") in conjunction with Article 257 (1) no 22 of the Healthcare Act, is explicitly recognised and permitted in various aspects throughout the Healthcare Act as well as the Telemedicine Ordinance. Additionally, the Healthcare Act also recognizes Telemedicine as one of the main objectives of the Croatian healthcare realm, according to Article 7 of the Healthcare Act.

Croatia

Are there specific fields of healthcare in relation to which telehealth services are currently available, and do they involve the use of proprietary technology or platforms?

According to the Network Of Telemedicine Centers Decision, Telemedicine services are available in the context of primary, secondary as well as tertiary care.

Regarding the technology, Article 30 of the Telemedicine Ordinance sets forth mandatory criteria in respect of information, communication, and computer equipment of the telemedicine centre which have to have an European certificate (CE). Those criteria are:

• uninterruptible power supply which must ensure a minimum autonomy of all components of 30 minutes;
• a computer with associated peripheral devices necessary for work; and
• information and communication devices for data transmission and protection.

Moreover, Article 31 of the Telemedicine Ordinance requires the following conditions in relation to information and communication equipment, computer equipment, and infrastructure of the telemedicine centre to be met:

• the computer network used for performing telemedicine activities must be a private computer network, without access to other computer networks and the Internet;
• the possibility of connecting the network information and communication infrastructure with other networks in order to exchange patient data. The connection must be made through a firewall in which traffic is filtered at least by destination IP addresses and ports;
• access to data in the database via any interface may only be granted to an authorised person;
• prevention of access of manufacturers and repairers of computer equipment to patient data. Such data may be accessed only by a person authorised to do so by the data owner (patient);
• the information system must be implemented with backup data storage in at least two spatially distant locations;
• backup of the information system is performed regularly on a daily basis;
• verification of backup copies of the information system is performed once every month in such a way that a fully functional information system is re-established from the backup copy;
• in audio or audio-video conferences, the audio and video delay must not exceed 150 ms; and
• data delay in the network communication infrastructure must not exceed 50 ms.

In addition, pursuant to Article 12 of the Telemedicine Ordinance, the equipment as well as information and communication infrastructure necessary for work in the basic network of telemedicine centres are to be provided by the Croatian Ministry of Health and shall obtained through public procurement mechanisms. Additionally, such equipment and infrastructure for the operation of telemedicine centres in the expanded network of telemedicine centres are provided by healthcare institutions, companies that perform healthcare activities, and private healthcare workers that perform telemedicine activities.

Croatia

Does the public health system include telehealth services, and if so, are such services free of charge, subsidised or reimbursed? Where the public health system does not include telehealth services, are such services covered by private health insurance?

The public health system includes telehealth services. Pursuant to Article 128 (2) of the Healthcare Act, health institutions that perform professional and scientific activities within the framework of the rights and duties of the Republic of Croatia in the field of public health, occupational medicine, telemedicine, toxicology and anti-doping, transfusion medicine and emergency medicine fall within the scope of "state health institutes".

Croatia

Do specific privacy and/or data protection laws apply to the provision of telehealth services?

Yes, the following laws apply:

• Croatian Act on Implementation of the General Data Protection Regulation (Zakon o provedbi Opće uredbe o zaštiti podataka – "Data Protection Act");
• Croatian Ordinance on the use and protection of data from medical documentation of patients in the Central Health Information System of the Republic of Croatia (Pravilnik o uporabi i zaštiti podataka iz medicinske dokumentacije pacijenata u Centralnom informacijskom sustavu zdravstva Republike Hrvatske – "Ordinance on the Use and Protection of Data"); and
• Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC ("GDPR").

Rules for protection of personal data implemented in the GDPR apply directly in Croatia. The Data Protection Act and Ordinance on the Use and Protection of Data generally provide for the obligation on users of medical data to keep the data from the patient’s medical documentation secret.

Additionally, Article 18 of the Telemedicine Ordinance specifically provides that recording of audio and video recordings during the provision and reception of telemedicine services is allowed only with the written consent of the recipient of the service. For a recipient of a service who is unconscious, has a severe mental disorder, or is a minor, the written consent shall be given by the legal representative or guardian of the recipient of the service. The written consent must contain the reason for the recording, the type of recording and the purpose for which the recording will be used.

Croatia

How should the cross-border transfer of personal information collected and processed in the course of telehealth services be carried out to ensure compliance with applicable privacy laws?

The general principles of GDPR apply.

Croatia

Are there any currently applicable codes of conduct on the use of telehealth systems and/or security of telehealth data in your jurisdiction?

According to publicly available information, there are no official guidelines adopted by Croatian authorities exclusively for telehealth – i.e., on how to provide health services. Therefore, general guidelines on privacy and the code of ethics for health workers adopted by Croatian authorities and guidelines of EU authorities are most relevant.

Croatia

Are any specific laws, regulations, or self-regulatory instruments expected to be adopted in the near future?

According to the relevant authorities, the national strategy on the field of telehealth will be still subject to regulation and developed alongside the digitalisation of health system. Currently, there are no special legal acts in the public discussion or in a legislative procedure.