What is NEN 7510?
In short
NEN 7510 is the Dutch standard for information security in healthcare, based on ISO 27001 with additional requirements for health data. Under the Decree on electronic data processing by healthcare providers, healthcare providers must work according to this standard.
What does NEN 7510 require?
Like ISO 27001, NEN 7510 works with a management system: mapping risks to the confidentiality, integrity and availability of data, taking measures and continually checking and improving them. The standard adds requirements specific to healthcare, where health data needs extra protection.
In December 2024, NEN 7510-1:2024 was published, aligned with ISO 27001:2022. According to the certification body Kiwa, certified organisations must have moved to the new version by 20 February 2027 at the latest. Two related standards go with it: NEN 7512 on secure data exchange and NEN 7513 on recording who has viewed or changed an electronic record.
Who must comply with NEN 7510?
The Decree on electronic data processing by healthcare providers requires healthcare providers to work according to NEN 7510 and NEN 7512 when processing client data electronically. A certificate is not mandatory for this, but it is the usual way to show that you follow the standard. Healthcare providers covered by the Cybersecurity Act also have the obligations under that law.
What to look for in healthcare software
As a healthcare provider you remain responsible, even if a supplier manages your electronic health record or other software. So choose suppliers with a NEN 7510 certificate whose scope covers the service you buy, ask how logging under NEN 7513 works, and conclude a data processing agreement.
Which software helps with this?
A supplier of an electronic health record (EPD) or other healthcare software should be NEN 7510 certified. Ask for the certificate and for logging under NEN 7513, so you can check who has viewed a record.
Compare in the category
Electronic health record (EHR) software
Including Intramed, ZorgAdmin and James Software.