Brazil Begins Moving 230 Million Health Records to a 'Sovereign Cloud'

The Brazilian Federal Government, through the Ministry of Health and its federal technology company Serpro, has begun migrating sensitive public health data from the Unified Health System (SUS) to a new ‘Sovereign Cloud’ infrastructure. The initiative marks a major strategic shift aimed at ensuring the country’s most personal information—covering over 230 million people—is stored exclusively within national territory and subject only to Brazilian law.

The initial phase of the project focuses on two critical systems: the National Registry of SUS Users (CadSUS) and the National Health Data Network (RNDS). CadSUS is the master index for every user of Brazil’s public healthcare system, which is one of the world’s largest, while the RNDS holds approximately five billion patient records and is the backbone for integrating digital care delivery across the country. The move is explicitly designed to meet the strict requirements of Brazil's General Data Protection Law, or LGPD, which classifies health information as sensitive personal data.

For the foreign reader, this push for digital sovereignty is a direct response to a previous reliance on large foreign technology providers. The government's goal is to reduce technological dependence and ensure that the critical infrastructure for public health remains under national control and jurisdiction, even in the face of international legal challenges or data requests. The government-owned Serpro, which is one of Latin America's largest public IT companies, is responsible for providing the architecture, technical consulting, and data center capacity for the new cloud.

This transition will be phased, with the Minister of Health, Alexandre Padilha, announcing an initial investment of R$18 million for the first stage. The migration of the CadSUS data is expected to be completed by the end of 2027, with the subsequent phase focusing on fully incorporating the massive RNDS data set. Officials emphasized that while the backend architecture is changing, the public’s experience using the digital services of the SUS should be unaffected, gaining only increased security and better federal integration of data.

What it touches: This strategic move directly impacts the cloud computing market in Brazil, particularly for multinational Big Tech firms that have previously hosted parts of the government’s public sector cloud operations. As the federal government shifts its most sensitive data to nationally controlled infrastructure, it signals a long-term preference for digital sovereignty models, potentially redirecting significant public IT spending toward state-owned providers like Serpro and Dataprev, and away from global hyperscalers for critical government applications.