With the European Health Data Space (EHDS) regulation now in force, the EU is embarking on an ambitious plan to make health data more accessible for both primary (patient care) and secondary (research and policymaking) uses. However, the real challenge lies in the details—how member states will implement the regulation, the role of national data access bodies, and how researchers and industry will navigate the new framework.

A phased rollout with tight deadlines

The EHDS introduces a structured timeline:

• March 2029: Patients will gain access to their digital health records, including electronic prescriptions and summaries of their medical history, across the EU. At the same time, researchers will be able to use anonymized health data from hospitals, registries, and national health systems for secondary purposes, such as clinical trials and policy development.
• March 2031: The system will be expanded to include additional types of health data, such as medical imaging, lab results, and hospital discharge reports.
  To achieve this, national and EU-wide infrastructures must be developed, with technical guidelines on interoperability, privacy, and access controls. The MyHealth@EU platform will be a critical component, acting as a secure channel for cross-border health data exchange.

A push for harmonisation and avoiding past mistakes

One of the biggest risks is fragmentation—different countries implementing the regulation in different ways, which could slow down the EHDS’s effectiveness. Experts are pointing to General Data Protection Regulation (GDPR) as a cautionary example, where inconsistent national interpretations created hurdles for researchers and businesses.

To prevent this, the European Commission is working closely with the Joint Action Towards the European Health Data Space (TEHDAS2) project, which is developing common guidelines for data access. The project, involving 29 countries, aims to align national policies on how data is described, stored, and shared. TEHDAS2’s work is expected to influence the upcoming implementing acts that the Commission will release over the next two years.

However, despite these efforts, some member states may not be prepared. Experts warn that those who delay implementation risk being left behind, particularly when it comes to granting access to health data for research purposes.

What this means for researchers and industry

For researchers, the EHDS promises a transformative shift in how health data is accessed and utilized. Key benefits include:

• Faster and easier access to large datasets for clinical trials, epidemiological research, and public health monitoring.
• Reduced bureaucratic barriers, as researchers will no longer need to negotiate separate data-sharing agreements with multiple national institutions.
• A boost for AI-driven health research, as access to structured, high-quality health data will accelerate machine-learning applications in diagnostics, drug development, and personalized medicine.

For industry, particularly biotech and digital health companies, the EHDS could create new opportunities in:

• Clinical trials, by allowing faster recruitment and real-world evidence generation.
• Digital therapeutics and AI-driven healthcare solutions, with companies leveraging anonymized patient data to refine predictive models.
• Investment and innovation, as a harmonized EU market makes Europe a more attractive location for developing and commercializing health solutions.
  While the regulation presents significant opportunities, there are still open questions about how companies will gain access to data, what the pricing models will be, and how intellectual property concerns will be managed.

Implementing the EHDS: What to expect in the coming years

With the European Health Data Space (EHDS) now officially in motion, attention is turning to its implementation. The European Commission has a demanding schedule ahead, with over 20 implementing acts to be developed in the next four years, defining the technical and legal specifics of how the EHDS will work in practice.

Key areas of implementation

1. Governance and Data Access Bodies
   • Each EU country will establish a national Health Data Access Body responsible for overseeing the secondary use of health data, including granting or denying access to researchers and industry.
   • These bodies will need to align with common technical standards and security protocols set by the Commission, ensuring interoperability across the EU.
2. Data Interoperability & Infrastructure Development
   • A major challenge is the harmonization of electronic health records (EHRs) across different healthcare systems, which currently operate on incompatible formats.
   • The Commission’s MyHealth@EU initiative will provide the digital backbone for cross-border data exchange.
   • The standardisation of metadata (how data is labeled and described) will be crucial for ensuring datasets from different countries can be meaningfully combined.
3. Privacy, Security & Opt-Out Mechanisms
   • Patients will be able to opt out of EHDS data sharing, though individual countries may impose different rules.
   • Strict privacy safeguards will be built into the system, ensuring that health data is pseudonymized or anonymized before being made available for secondary use.
   • Logging mechanisms will be implemented to track who accesses what data, ensuring transparency and accountability.
4. Funding & Readiness of Member States
   • While the TEHDAS2 project is helping countries align their preparations, some member states are significantly behind.
   • The European Commission is urging governments not to wait for the 2027 deadline for implementing acts but to start preparing now.
   • The funding for national implementation remains a challenge, with many countries likely needing financial support from EU programs like EU4Health and Digital Europe.

Challenges and Concerns

Despite the ambitious vision of the EHDS, not everyone is convinced of its smooth implementation. Key concerns include:

• Uneven progress across member states: Some EU countries have advanced digital health infrastructure, while others have barely started digitizing medical records.
• Legal complexities: While GDPR remains the overarching privacy law, additional national laws on data protection could create conflicts in implementation.
• Industry concerns about access: Pharmaceutical companies, biotech firms, and health-tech startups are eager to use EHDS data for R&D, but it remains unclear how commercial access will be regulated and priced.
• Public perception & trust: Data privacy remains a sensitive issue, and previous scandals involving health data breaches could fuel public skepticism.

Final Thoughts: The EHDS Can Reshape Health Innovation—But Only If Done Right

The European Health Data Space is one of the most ambitious digital health projects in history. If properly implemented, it could:

• Enable groundbreaking research into neurological conditions.
• Accelerate the approval of new treatments through real-world data analysis.
• Strengthen EU competitiveness in health innovation by providing an alternative to the U.S. and China’s dominance in digital health.

But the risks are real. Poor implementation, bureaucratic delays, or inconsistent national policies could severely limit the EHDS’s impact. With the first major deadlines approaching in 2027, the time to implement is now.