Imserso-Gipuzkoa Agreement 2026: What Changes in Dependency Management

Key data

The Gipuzkoa Provincial Council manages dependency with its own information system, separate from the state SISAAD. This requires establishing a technical and legal bridge with Imserso so that both systems can communicate. Without that bridge, the State cannot calculate how much money should be transferred to Gipuzkoa each month as minimum protection funding.

This second agreement, published in the BOE on October 28, 2026, renews the previous 2022 agreement and sets the technical and data protection rules for the next four years.

What does this regulation establish?

The agreement regulates the technical and legal procedure that allows the information systems of the Gipuzkoa Provincial Council to connect with the System for Autonomy and Dependency Care (SISAAD) of Imserso.

The key elements it establishes are:

• Technical interoperability: data exchange is carried out through ENI web services (National Interoperability Scheme), the official standard for communication between public administrations in Spain.
• Identified access: access is provided via Cl@ve, ensuring that only authorized personnel can consult or send data.
• Traceability and integrity: all exchanges are recorded, with guarantees that data is not altered during transmission.
• Personal data protection: the agreement incorporates the necessary safeguards for processing data of persons in situation of dependency, which are especially sensitive data.
• Calculation of minimum protection level: the main functional objective is to ensure that the State can calculate monthly the minimum financing that corresponds to Gipuzkoa for each person recognized in situation of dependency.

Economic and operational impact

The most direct impact of this agreement is economic for the provincial administration: without the connection to SISAAD, Imserso cannot calculate the monthly minimum protection level that the State must transfer to Gipuzkoa to co-finance dependency benefits.

From an operational perspective, the agreement implies:

• Maintenance and updating of provincial information systems to ensure compatibility with ENI standards.
• Management of access via Cl@ve for technical personnel who perform data exchanges.
• Audit and traceability of all data transmissions between both administrations.
• Periodic review of data protection protocols, given that sensitive personal data of dependent persons is handled.

For persons in situation of dependency in Gipuzkoa, the impact is indirect but relevant: the correct operation of the agreement ensures that their benefits and financial settlements are calculated and paid correctly and without interruptions.

Who does it affect?

• Gipuzkoa Provincial Council: as the managing administration of the dependency system in its territory, it is the party that must adapt and maintain its systems to comply with the technical requirements of the agreement.
• Imserso: as the state body responsible for SISAAD, it manages the state side of data exchange and financing calculation.
• SAAD managing administrations in Gipuzkoa: any public entity that participates in processing dependency cases in the provincial territory.
• Persons in situation of dependency in Gipuzkoa: final beneficiaries, whose benefits and settlements depend on the correct functioning of the system.
• Social services professionals in Gipuzkoa: social workers, case managers and technicians who use provincial information systems to process cases.

Practical example

A person residing in Donostia-San Sebastián is recognized with a degree of dependency that entitles them to financial assistance for care in the family environment. Their case is managed entirely in the information system of the Gipuzkoa Provincial Council.

For the State to calculate the minimum protection level that must be transferred monthly to Gipuzkoa for this person, Imserso needs to access the data from that case in SISAAD. Thanks to the agreement, the provincial system automatically sends that information through ENI web services, with authenticated access via Cl@ve and with complete traceability of the transmission.

Without the current agreement, that exchange would not have legal or technical coverage, which could delay or block the calculation and transfer of the state financing corresponding to Gipuzkoa.

What should administrations do now?

1. Verify technical compatibility: the systems teams of the Gipuzkoa Provincial Council must confirm that their platforms comply with the required ENI standards for data exchange web services.
2. Review Cl@ve access: audit which technical personnel have active access via Cl@ve to the exchange system and update permissions if necessary.
3. Update data protection protocols: since the agreement incorporates new safeguards, review the records of processing activities and the data processor agreements related to dependency data exchange.
4. Communicate the change internally: inform social services and dependency management teams about the new agreement validity (until approximately 2030) and any changes in operational procedures.
5. Plan the next renewal: note the agreement expiration date (4 years from October 2026) to initiate with sufficient advance the renewal or renegotiation process before it expires.

Official source

Consult complete regulation in official source

Notice: This article is purely informative in nature and does not constitute legal advice. For specific decisions, consult a qualified professional. Source: https://www.boe.es/diario_boe/txt.php?id=BOE-A-2026-22604