European epidemiological surveillance network 2026: what health authorities must do

Key data

Health authorities across the EU have a new operational obligation from 18 September 2026: to adapt their systems for collecting, validating, analyzing and transmitting epidemiological data to the technical procedures set by the Implementing Regulation (EU) 2026/2096. In Spain, this directly affects regional health departments, the Ministry of Health and epidemiological surveillance bodies that feed the European network managed by the ECDC.

This regulation develops the framework established by the Regulation (EU) 2022/2371 on serious cross-border threats to health, and converts what were previously general coordination guidelines into concrete technical obligations.

What does this regulation establish?

Regulation 2026/2096 regulates the technical and operational functioning of the European epidemiological surveillance network. Its four pillars are:

The regulation specifically defines: the information exchange protocols, the accepted data formats and the mandatory notification deadlines. These three elements are what determine whether a national system is in compliance or not.

Economic and operational impact

The regulation does not set specific investment amounts or concrete economic sanctions in the available text. However, the operational implications are significant and generate real costs for the affected administrations:

• Technology investment: National public health systems will need to adapt their data infrastructures to ensure interoperability with the ECDC European platform. This may involve software updates, new system integrations and development of transmission interfaces.
• Staff training: The regulation provides that the required adaptations will require specific training for technical and health personnel responsible for data notification and transmission.
• Change in workflows: Internal data validation and analysis processes will need to be redesigned to comply with European protocols before transmission to the ECDC.
• Multi-level coordination: In Spain, the decentralized structure of the health system (17 autonomous communities + Ceuta and Melilla) means that adaptation must occur at multiple administrative levels in a coordinated manner.

Who does it affect?

• Spain's Ministry of Health: As the national authority responsible for coordination with the ECDC and ensuring compliance with the regulation at the state level.
• Regional Health Departments: Responsible for collecting and validating epidemiological data in their territories, which must feed the national system and, by extension, the European system.
• National Epidemiological Surveillance Network (RENAVE): Spain's mandatory disease notification system will need to adapt to the new European formats and deadlines.
• EU epidemiological surveillance bodies: All Member States are required to comply with the same technical protocols to ensure data consistency at the European level.
• Technology providers in the public health sector: Companies that develop and maintain health information systems for public administrations will need to adapt their solutions to the new European standards.

Practical example

A regional health department detects an outbreak of a notifiable disease in its territory. Under the new regulation, the mandatory course of action is as follows:

1. Collection: Outbreak data is collected following the technical protocols defined in Regulation 2026/2096 (not the autonomous community's own format).
2. Validation: The regional system validates the data in accordance with European standards before transmitting it to the national level.
3. National transmission: The Ministry of Health aggregates and transmits the data to the ECDC in the required data format and within the mandatory notification deadlines set in the regulation.
4. Interoperability: If the regional system is not interoperable with the ECDC platform, transmission fails or requires manual conversion, which may breach mandatory deadlines.

This example illustrates why investment in technology interoperability is not optional: a system that does not "speak" the same language as the ECDC generates automatic non-compliance with each notification.

What should authorities do now?

1. Audit current epidemiological notification systems: Identify which health information systems are currently used for disease reporting and assess their compatibility with the data formats required by the ECDC.
2. Review internal notification deadlines: Compare current mandatory notification deadlines (national and regional) with the European deadlines set in Regulation 2026/2096 and identify any misalignments.
3. Plan technology adaptation: Initiate procurement or update processes for health information systems to ensure interoperability with the ECDC platform.
4. Train technical and health personnel: Design and deliver specific training on the new information exchange protocols and required data formats.
5. Coordinate with the Ministry of Health: Autonomous communities must align their adaptations with the guidelines that the Ministry establishes as the national contact point with the ECDC.
6. Verify compliance with technology providers: If systems are outsourced, require providers to certify compliance with the regulation's technical standards.

Official source

View complete regulation on official source

Disclaimer: This article is for informational purposes only and does not constitute legal advice. For specific decisions, consult a qualified professional. Source: https://eur-lex.europa.eu/./legal-content/AUTO/?uri=CELEX:32026R2096