Data Portal manual
The Data Portal publishes information about transactions between service providers and Iceland Health, such as payment documents, letters, and various statements related to payments. Access is granted to all service providers and healthcare professionals who have dealings with Iceland Health.
Information about payments is under the operator's identification number, while professional communications, such as certificates and letters to a doctor, are under the relevant individual's identification number.
Gagnagátt is a "my page" for healthcare practitioners and operators that are in business with Iceland Health.
The portal has two parts.
Business information. Information on transactions between operators and Iceland Health, such as payment documents and statements of various kinds in connection with payments. Access is granted to all operators that are in business with Iceland Health. Access is only provided through the organization ID.
Information on patients' rights and administration. This consists of the publication of patients' rights status, applications, certificates and various patient-related information. Access is granted to healthcare practitioners and their employees. Access is only provided through the healthcare practitioner's own ID number.
Access to Gagnagátt:
The following parties have access to information in Gagnagátt:Data protection officers. Gagnagátt may be accessed by the Data Protection Officers of operators and/or healthcare institutions to send sensitive documents to Iceland Health and receive such documents through the portal. If these solutions are available, the Data Protection Officer has to send a request to hjalp@sjukra.is.
The operator (organisations) is granted commercial access through a new registration of an identity number.
A healthcare practitioner shall have access to his/her rights status and be in charge of the registration of his/her own personal identification number. A healthcare practitioner who is in business with Iceland Health in his/her own personal identification number shall have access to the business section and the rights section of Gagnagátt.
Healthcare workers. An operator or healthcare provider may grant an employee (e.g. an employee on remand or in accounting) access to Gagnagátt and allocate access to information, cf. point I. The allocation function is located within the portal under the Access Allocation category. Employee access is the responsibility of the relevant access provider under a contract with Iceland Health. The employee signs a special declaration of confidentiality.
The dissemination of information and data to Iceland Health
Iceland Health places great emphasis on the dissemination of data and other communication through the Service Portal of the Administration, i.e. Gagnagátt, cf. Article 50 of Act no. 112/2008. The safest way for Iceland Health customers to send requests, applications and other data is through the Service Portal, as well as receiving data from the Agency.
Healthcare providers and other operators may send documents and requests through the Agency/organisation data portal and receive data.
Data protection officers can have special access to Gagnagátt to send documents and requests to the Health Insurance Administration and receive data.
Business information | Rights status and administration | |
Operator | X | |
Healthcare practitioner (may also be an operator) | X | |
Healthcare practitioner (working under the authority of the operator or healthcare practitioner) | X | X |
Login to Gagnagátt uses a login service from Ísland.is, you can login as Individual or as Power of attorney through Ísland.is. All public access goes through Individual, but individuals who are acting as proxy for an organization through Iceland.is need to use Power of attorney through Ísland.is.
Individuals who are registered as secondary users log on as Individual.

You can log on with an electronic ID, an app ID or a card ID. Those who log on as Individual go directly into the portal unless there is more than one account, and a selection page will appear to select the correct account.

Those who register through Power of attorney through Ísland.is will receive a menu where an individual has to select which agency he or she is logging on to.

When you enter Gagnagátt it is good to click on Stillingar. Go over the registration areas and in particular ensure that the correct e-mail address and banking information are registered.
The default it is marked that a company wants to receive an e-mail when a new document is published in the portal, but you can tick no here and you will not be sent an e-mail when a new document is connected to the portal.
This may be the case, for example, if a company that has extensive communications with Iceland Health and is receiving frequent letters in the portal.

Under Þjónusta SÍ you can find all the access that the individual has access too. If you press the category name, like Skjöl, you will find more options under it.

Underneath Skjöl a window opens, where you can click on Bréf for example. By default, all "unread" letters appear, but it is possible to distinguish between read and unread letters because the line for the unread letters is in bold. As soon as the message is opened the font will be normal and they will disappear from this image. To view and search for both read and unread messages, check Virkja leitarskilyrði and you can select the date of the period you want to search for.
If you click on the column name (for example, Kennitala), the messages are ranked from lowest to highest. As shown in the figure below, the order by Dagsetning appears, with an arrow appearing downwards behind the name. The column Heiti gives, for example, information about the origin of the message, i.e. which issue Iceland Health message is addressed. The name and type give users the ability to sort the messages and simplify accessing the messages they need to view.
Clicking the Print button will print the information in the window. Each line of a message contains a mark showing the form in which the message is written. By clicking on the graphic for . pdf files, the message is downloaded from the computer and can be opened.
N.B. If the health insurance employees register an explanation in the letter, i appears above the icon for pdf documents.
By placing the cursor over (i) the explanation is displayed.


To access payment documents/receipts, click Greiðsluskjöl under Skjöl. It displays all payment documents sent to the personal identification number that is behind the account in question.

The icons displayed behind the amount field have the following explanation.

The most sensitive categories of documents are access controlled down to extra users. The primary user sees all documents published in Gagnagátt, but secondary users do not see documents in the language areas that are access controlled unless they are opened for access. This applies to all three categories: Greiðsluskjöl, Mín skjöl and Bréf.
The most vulnerable categories include: Accident insurance, Patient insurance and Treatment abroad.
Contact to hjalp@sjukra.is is needed to open the view for access-controlled case groups under documents.
Secondary user registration is through Úthlutun á aðgangi and the option is only open to the individuals who has access to the company's credentials unless a request from a company / organisation custodian is made to open this access to a secondary user and is only done with the confirmation of the manager.
Under Skjalaskil – Rafræn skil á skrá is it possible to submit documents to Iceland Health in a safe way.

Under Tegund skila, you can select the category of data to be sent. If no category is available or missing the correct category, you can send an email to hjalp@sjukra.is and request that the appropriate category of return to be opened. You can enter an explanation under Skýring, but this field is optional.
The document to be sent is selected and dragged over the window Skrár til að skila. You can also press Finna skrá, then a window opens to find the document(s) to be sent. It is possible to select multiple documents at once. If the wrong document has been selected, it can be deleted before sending by clicking on red X under Aðgerðir.
To complete the transmission, press Senda. The acknowledgement of receipt of the documents is displayed and the documents appear under Innsendar skrár.
These are the terms that apply to the use and access to Gagnagátt of Iceland Health. These terms will apply to the user once the person has agreed to them.
Use of Gagnagátt
Gagnagátt is a “my pages” for healthcare professionals and operators who are in business or have relations with Iceland Health.
The purpose of using Gagnagátt is to share information and data in a secure manner. Those who interact with Iceland Health are obliged to use Gagnagátt to share and receive data and information that concerns individuals, as specified in Article 50 of the law number 112/2008.
Categories of information
Information in Gagnagátt is threefold:
Trade information. Information on business transactions between the operator and Iceland Health, including payment documents and payment statements.
Information on rights. Information on the rights and status of individuals, applications, certificates and other information related to the administration of matters concerning users of healthcare/ applicants.
Data exchange. Data exchange in connection with individual cases/applications.
Login
When logging in to Gagnagátt, the login service is used. Individuals who are registered as additional users can register as Individuals. Main users, that is, individuals who have a mandate for healthcare providers (institutions/enterprises) through Ísland.is, should register as Authorised through Ísland.is.
If a user becomes aware in any way that an unauthorised party has accessed an electronic ID, the user shall immediately contact the issuer of the electronic ID and request that the relevant ID be blocked in order to prevent it from being misused by unauthorized parties in Gagnagátt.
Please familiarize yourself with the terms of Ísland.is which can be accessed on their website.
Access
The following parties can access Gagnagátt:
Operators and healthcare providers (organisations) who are in business with Iceland Health can have access to business information and data returns. The primary user can register employees as secondary users. Access is only provided through the operator/institution's ID number.
Healthcare workers can access rights information through their own social security number (kennitala). Healthcare worker who is in business with Iceland Health in his own social security number (kennitala) can access business information, rights information and data returns.
Data protection officers can get special access to Gagnagátt.
Use of contact information
The primary user of the healthcare provider or operator shall register the institution/entity's e-mail address under Settings. Healthcare professionals and data protection officers shall register work e-mail addresses, not private e-mail addresses under Settings.
The email address registered in Gagnagátt is used for:
sending notifications of new letters to Gagnagátt.
communication
other statutory tasks Iceland Health, service surveys and more
User responsibilities
The user must take the necessary precautions to ensure personalised security features when logging in and using Gagnagátt.
The user is responsible for all actions he/she performs following login to Gagnagátt.
The user is responsible for the correctness of information and data sent through Gagnagátt. In the case of information originating from a non-user, the user is responsible for its correctness.
A user is only allowed to use access to Gagnagátt for the sake of his/her work.
The user is prohibited from using the access for his own personal use, that is because of the rights and/or cases of the person concerned with Iceland Health.
The user may not allow other parties to use access or share information from Gagnagátt to an unauthorised party.
If the user is aware that others are using his access, he or she must inform Iceland Health immediately via the email address hjalp@sjukra.is
Access for secondary users is the responsibility of the operator and healthcare providers (primary user).
The user is responsible for the correctness of his user information, including his email address.
Security and retention times
Appropriate technical and organisational measures have been taken to ensure the security of information contained in Gagnagátt. Gagnagátt is protected through a web-based platform and all communications are encrypted.
Information in Gagnagátt stored for an unspecified period of time.
Iceland Health obligations
Iceland Health the responsible party for the information that can be found in Gagnagátt. In the case of information originating from a third party, the person is responsible for its accuracy. The processing of personal data in Gagnagátt is subject to the provisions of Article 50 of Act No. 112/2008 on health insurance, the provisions of the Act on Personal Data Protection and the Processing of Personal Data No. 90/2018 and the law No. 97/1997 on the Rights of Patients, when applicable. All information in Gagnagátt is treated as confidential. See further Personal Data Protection and Privacy Policy for individuals who communicate with the institution.
Other
Iceland Health reserves the right to review these terms without special notice or warning.
In the event of a user's breach of these terms, Iceland Health reserves the right to block a user's access to Gagnagátt and demand compensation or use other lawful remedies for damages that Iceland Health or the institution's customers may suffer as a result of the breach.
Data and information in Gagnagátt may contain personal data, including sensitive ones. If data has been received by the wrong recipient, the person concerned must remain as confidential as possible and inform Iceland Health. The data must not be registered with the user or used in any way, as per Act No. 70/2022 on Electronic Communications. If the user has been aware of this, the data protection officer shall be informed immediately via the email address personuvernd@sjukra.is.
