The Health Insurance Organisation (HIO) has announced the forthcoming introduction of an identity verification procedure for telephone contact with the GESY Service Centre, reminding beneficiaries that it will use a one-time password (OTP) to further strengthen the protection of personal data.
The procedure takes effect from Wednesday, October 7, 2026, and will apply when a caller requests information from the centre that includes personal data, ensuring that such information is disclosed only after secure identification.
Where access to information containing personal data is needed, callers must make sure they have immediate access to the mobile phone number registered in their contact details in the GESY system. A one-time code, valid for five minutes, will be sent to that number and must be entered into the telephone system for verification.
After successful verification with the code, a Service Centre operator will carry out an additional identity check, asking for details such as ID number and date of birth, to ensure that personal data is disclosed only to the beneficiary or to a person entitled to receive it.
The HIO stressed that information containing personal data will be provided only if the identification process is completed successfully. Otherwise, no personal data will be disclosed and only general information will be given.
