Imserso and Catalonia share dependency data: what changes in 2026

Key data

Catalonia manages dependency with its own information system, but is obligated to transmit data to Imserso so the State can calculate minimum protection level funding and prepare statistics for the System for Autonomy and Dependency Care (SAAD). This second agreement—the first was signed in 2022—precisely regulates how that exchange occurs, under what technical conditions and with what security guarantees.

The Resolution of August 24, 2026 from Imserso publishes the agreement and gives it effect from September 1, 2026.

What does this regulation establish?

The agreement defines the technical and legal framework for Catalonia's and Imserso's information systems to communicate securely and traceable. These are the key elements it regulates:

The agreement does not alter the dependency management model in Catalonia: the autonomous community maintains its own system. What it regulates exclusively is the "channel" through which data travels to Imserso and the conditions under which that traffic is valid, secure and auditable.

Economic and operational impact

This agreement does not generate direct costs for private companies. Its impact is fundamentally operational and compliance-related for the administrations involved. The specific effects are:

• Minimum protection level funding: Correct monthly data transmission is the basis on which the State calculates how much to transfer to Catalonia for this purpose. A transmission failure can directly affect the amounts received.
• National SAAD statistics: Data flowing through this agreement feeds official dependency statistics. Its reliability impacts public policy planning and resource allocation.
• Technological adaptation: Dependency management units in Catalonia must ensure their systems are compatible with ENI web services and the Cl@ve authentication system, and that users with access are properly designated.
• Audit and data protection: All transmissions are subject to audit. System managers must ensure compliance with data protection regulations in each exchange.

Regarding the 2022 agreement, this second agreement updates and strengthens the technical framework, adapting it to current National Interoperability Framework standards.

Who does it affect?

• Departament de Drets Socials of the Generalitat de Catalunya: responsible for managing the Catalan dependency system and ensuring monthly data transmission to Imserso.
• Imserso (Institute for the Elderly and Social Services): data recipient and responsible for SISAAD at the national level.
• Dependency managers and technicians in Catalonia: users who operate information systems and must be properly designated to access the exchange platform.
• Information systems and IT managers of both administrations: must ensure technical compatibility with ENI web services and Cl@ve authentication.
• Data Protection Officers (DPO) of the entities involved: transmissions are subject to audit and data protection regulations.
• SAAD beneficiaries in Catalonia: indirectly, since correct data transmission ensures proper calculation of funding that supports their benefits.

Practical example

A dependency management unit of a Catalan municipality acting as a collaborating entity of the Generalitat manages cases of people in dependency situations. Until now, data from those cases reached Imserso through the Catalan system via the 2022 agreement.

With the new agreement in effect from September 1, 2026, that unit must verify that:

1. Technicians accessing the exchange system are properly designated by the competent administration, as required by the agreement.
2. Access is performed using Cl@ve authentication, not generic credentials or non-approved systems.
3. Monthly transmissions occur within established timeframes, since the calculation of minimum protection level funding that Catalonia receives depends on them.
4. There is an auditable record of each transmission, in accordance with data protection regulations.

If monthly transmission fails or data is incorrect, Imserso cannot correctly calculate corresponding funding, which may result in adjustments or corrections to transfers to the territory.

What should administrations do now?

1. Review user and application designation: Each administration must formally designate users and applications with access to the exchange system. Verify that the list is current and documented.
2. Check technical compatibility: Ensure that Catalan information systems are compatible with ENI web services and the Cl@ve authentication system required by the agreement.
3. Establish monthly transmission schedule: Define internally the responsible parties and timeframes to ensure data reaches Imserso each month without interruption.
4. Update data processing records: Transmissions are subject to audit and data protection regulations. The Data Protection Officer must review that data flows are properly documented.
5. Coordinate with Imserso for any technical incidents: The agreement establishes that both administrations are responsible for ensuring information traceability and integrity. In case of failure, the system communication protocol must be activated.

Official source

Consult complete regulation at official source

Notice: This article is for informational purposes only and does not constitute legal advice. For specific decisions, consult a qualified professional. Source: https://www.boe.es/diario_boe/txt.php?id=BOE-A-2026-18420