Key points
- AIMA's 2024 figures list 167,321 foreign residents across the Algarve's sixteen municipalities, led by Loulé at 29,578, Albufeira at 26,906 and Portimão at 22,728.1
- Every private health establishment in Portugal must be registered with the ERS as a condition of opening and operating, and must update its registration within 30 days of any change.3
- Portugal's Law 58 of 2019 restricts access to health data to those who need to know it and requires the patient to be notified of any access to their data.5
- Article 4 of the EU AI Act asks every clinic using an AI system to ensure its staff have sufficient AI literacy.7
- wai hosts each clinic's records in its own country, under that country's rules. We set this up with your clinic.8
Summary
An Algarve clinic can use AI for notes and patient messages under GDPR and Portugal's Law 58 of 2019, with a person approving every message and the clinician signing every note. The clinic must be registered with the ERS, keep access to health data on a need-to-know basis, and be able to tell a patient who accessed their data.
In the Algarve clinics that keep their diaries full, a resident's message from Loulé is answered the same morning and the doctor signs every note before lunch. More than 167,000 foreign nationals live across the region's sixteen municipalities, and Portuguese law sets clear terms for how a clinic handles their records.1
See it in your clinicThirty minutes on your own patients and doctors.
Request a demoSee a morning of enquiries to an Algarve clinic become approved bookings with deposits in euros, in fifteen minutes with a clinician who uses wai daily.
| Body or law | Rule | What to ask | How wai meets it |
|---|---|---|---|
| ERS, Statutes approved by Decree-Law 126 of 2014, Article 26 | Registration as a condition of opening, updated within 30 days of any change | Does our entry match the services we now offer | Clinician and service details kept current in the clinic's own booking page |
| Law 58 of 2019, Article 29 | Need-to-know access, staff bound to secrecy, patient notified of any access | Can we show who opened a record, and when | Role-based access enforced in the database, every action logged and exportable |
| CNPD | Supervises GDPR and Law 58 of 2019 in Portugal | Where is the data hosted and who processes it | Records hosted in Portugal, subprocessors named with 30 days notice |
| EU AI Act, Article 4 | Sufficient AI literacy for staff using AI systems | Who briefs the team on AI drafts | AI drafts, a person at the clinic approves, the clinician signs |
The private care market in the Algarve
The Agency for Integration, Migration and Asylum's 2024 municipal figures for the district of Faro, which covers the whole Algarve, list 29,578 foreign residents in Loulé, 26,906 in Albufeira, 22,728 in Portimão, 17,986 in Faro and 16,234 in Lagos.1 Across the sixteen municipalities they add up to 167,321.1
Loulé ranks among the Portuguese municipalities with the most foreign residents, at 29,721 in AIMA's 2025 report, alongside Braga and Vila Nova de Gaia.2 The district of Faro is one of the four coastal districts, with Lisbon, Setúbal and Porto, that together hold 70.3% of Portugal's foreign residents.2
The rules a clinic in the Algarve works under
The Entidade Reguladora da Saúde keeps a mandatory public register of every health establishment in the public, private, cooperative and social sectors, and registration is a condition of opening and operating.3 A clinic updates its entry within 30 days of any change, and operating unregistered carries fines of 1,000 to 3,740.98 euros for an individual and 1,500 to 44,891.81 euros for a company.3 The ERS also runs the licensing portal for health establishments.4
Law 58 of 2019 applies GDPR in Portugal, with the Comissão Nacional de Proteção de Dados as supervisor.56 Article 29 sets the terms for health data. Access follows the principle of need to know, the data is processed by a professional bound by secrecy or a person under a duty of confidentiality, and every member of staff and service provider with access is bound to secrecy.5 The patient must be notified of any access to their personal data, and the clinic must provide the traceability that makes this possible.5
Article 4 of the EU AI Act asks providers and deployers of AI systems to ensure a sufficient level of AI literacy among the staff who use them.7 A short walkthrough of how drafts are produced and approved covers it for the front desk and the doctors.
wai hosts each clinic's records in its own country, under that country's rules. We set this up with your clinic. wai is compliant with these rules and built for clinics in the Algarve.8 Access in wai is role-based and enforced in the database, and every message, draft, approval and signature is logged and exportable, which gives the clinic the trail Article 29 asks for.8
The languages Algarve patients write in
AIMA's 2025 report finds Brazilians the largest foreign community in Portugal for a sixth year, at 493,622 people and 31.1% of foreign residents.2 Among European nationals it highlights the Italian, British and Ukrainian communities.2
wai works in any language.9 Each reply is drafted in the language the patient used and waits for a person at the clinic to approve it.
What a demo shows in the Algarve
The demo opens on a family medicine clinic in Almancil. Overnight, a retired couple in Vilamoura has written by email asking for back-to-back check-ups before they fly north in November, and a holidaymaker in Albufeira has sent a WhatsApp asking whether a doctor can see a child with an ear infection today.
wai reads each doctor's busy times from Google Calendar, Outlook or Apple Calendar, offers adjoining open slots for the couple and the first open slot that day for the child, and drafts both replies in the language each message arrived in. The receptionist approves them at 8:30, and each patient pays a deposit in euros through the clinic's own Stripe account and receives a confirmation, a receipt and an intake questionnaire.
In the consultation, the note is drafted while the doctor talks, and the doctor reviews and signs it. Each patient gets a wai Profile with their letters and results, which they can export or remove.
For health systems, insurers and public bodies in the Algarve
Hospital groups, insurers and public health bodies in the region can have wai build a system around one pathway, such as seasonal visitor care, with records hosted in Portugal, clinician sign-off on every note and the rights to data and configuration written into the contract. How that work is scoped is described on the organisations page.
Where to start
First, check that the clinic's ERS entry lists every service and clinician it offers today, and update it within 30 days of any change.3 Second, map who in the team needs access to which records, and agree with your data protection lead how patients are told about access, as Article 29 requires.5 Third, give the team a short AI briefing in line with Article 4.7
Then count last month's enquiries by month and by channel, so the demo runs on a real high-season week. The guide to after-hours enquiries shows how overnight messages are handled, and prices are published on the pricing page.
Bring a week of high-season messages and watch each one drafted for your team to approve.
Frequently asked questions
Does a private clinic in the Algarve need ERS registration?
Yes. Every health establishment in the private sector must be registered with the ERS as a condition of opening and operating.3
What happens if the ERS registration is out of date?
Operating without registration or without updating it is an offence, with fines of up to 44,891.81 euros for a company.3
Do patients have to be told who accessed their data?
Yes. Article 29 of Law 58 of 2019 requires the patient to be notified of any access to their personal data, and the clinic to provide the means to trace it.5
Does the EU AI Act apply to a clinic using AI drafts?
Article 4 asks deployers of AI systems to ensure their staff have sufficient AI literacy.7 A short briefing on how drafts are checked meets that in practice.
Where would our records be hosted?
wai hosts each clinic's records in its own country, under that country's rules. We set this up with your clinic.8
Sources
- 1AIMA, Agência para a Integração, Migrações e Asilo, 2025População estrangeira residente 2024, por distrito e concelho, anexo ao Relatório de Migrações e Asilo 2024Read 15 October 2026Read source
- 2AIMA, Agência para a Integração, Migrações e Asilo, 2026Relatório de Migrações e Asilo 2025Read 15 October 2026Read source
- 3Entidade Reguladora da Saúde, 2023Alerta de Supervisão n.º 4/2023, obrigação de registo e de atualização dos dados no SRERRead 15 October 2026Read source
- 4ERS, 2026Entidade Reguladora da Saúde, official websiteRead 15 October 2026Read source
- 5Procuradoria-Geral Regional de Lisboa, legislation database, 2019Lei n.º 58/2019, de 8 de agosto, execução do RGPD, article 29Read 15 October 2026Read source
- 6CNPD, 2026Comissão Nacional de Proteção de Dados, official websiteRead 15 October 2026Read source
- 7EUR-Lex, Publications Office of the European Union, 2024Regulation (EU) 2024/1689, the Artificial Intelligence ActRead 15 October 2026Read source
- 8wai, 2026Security at waiRead 15 October 2026Read source
- 9wai, 2026wai changelog, intake answered by voice in any languageRead 15 October 2026Read source
Every resident and visitor answered the same morning, every note signed before lunch.
Fifteen minutes with a clinician who uses wai daily, on your own diary and payments. We reply within one working day.
Partner with us
See it on your own patients, then build it with us
Thirty minutes on your own patients, doctors and rules, in your market. We reply within one working day, and the clinics that partner with us early shape what we build next.
See what wai does between the visits

