Brazil Keeps Health Access Open While Standardizing Patient Identity

Brazil’s CadSUS information model gives health systems a preferred way to identify a person without making complete civil documentation a condition of care. Ordinance 12,263, dated October 1 and published on October 5, pairs a standardized record with explicit provisions for people who cannot yet supply a birth registration or CPF number.

CPF, the individual taxpayer registry number, is the preferred identifier. The National Health Card number, CNS, remains a secondary and historical identifier. That distinction matters when an existing care record has to follow a person through a later change in identification.

Registration Can Start Before Documentation Is Complete

Where civil registration or CPF enrollment is unavailable at the time of care, the rule provides for a temporary identifier in CadSUS when enough minimum data can be collected to distinguish the person temporarily. CNS must later be linked to CPF while preserving the care history.

The rule also states that missing civil documents or a permanent home must not obstruct access to health services. It recognizes forms of vulnerability that can become barriers to identification, registration or reception. The administrative objective is to improve identification while keeping a person’s immediate route into care available.

This requires two tasks to remain separate in practice. Staff need to record the encounter under the information they can establish, and the record may subsequently need reconciliation with a more durable identifier. Treating an incomplete record as a reason to refuse service would lose the distinction the ordinance makes.

Some Corrections Belong in the Supplying System

The information model groups identity and personal data, sensitive and self-declared information, addresses, education and work, control data, supplementary health coverage and links to primary care. Its significance lies partly in how some of those blocks are supplied.

Primary-care linkage comes through interoperability with SIAPS, the primary-care information system. Authorized operators can view that information, but they cannot fill it in or alter it manually in CadSUS. Corrections must be made in the originating system and then made available through the connection.

This preserves a clear responsibility for the record. If a displayed primary-care link is wrong, editing a second copy in CadSUS could leave two systems disagreeing about the same person. Requiring correction at the source makes the intended route explicit, although the ordinance alone cannot show how quickly a particular correction will reach every user.

A Digital View Still Depends on Submitted Records

A separate Ministry of Health explanation of the digital child-health booklet illustrates the limits of a connected view. Parents use a Gov.br account, and access depends on their relationship with the child being recorded in official government databases. The ministry says recognition of family links is being expanded gradually.

The booklet displays health information sent by care establishments to integrated SUS systems, particularly the National Health Data Network. Vaccinations or consultations can be absent if their records have not yet been sent or integrated. Where information is missing or differs, the ministry directs users to the unit responsible for the care or vaccination.

That is evidence about an existing service’s record dependencies, not proof that the new CadSUS model has already corrected them. It shows why a common identifier is only one part of a useful health record: the relevant encounter and relationship data also have to arrive from the responsible source.

The ordinance gives administrators a more precise basis for that work. Keep historical care attached when identity improves, preserve access while documents are incomplete, and send corrections to the system authorized to make them. Those rules make the record easier to govern without promising that every connected screen is already complete.