What the EHDS is and why it was established
The European Health Data Space (EHDS) is a European Regulation (EU 2025/327) that entered into force in March 2025. It creates a common framework for using electronic health data across the European Union (EU). The main motivation behind the EHDS is the increasing need for efficient, secure and interoperable health data exchange for both clinical care and research. Before the EHDS, European health data were fragmented, stored in different formats and often unusable across borders.
The EHDS was established to solve several structural problems:
- Patients often cannot access their own electronic health records (EHRs) in a usable format when they travel or move to another Member State
- Doctors face gaps in information when treating foreign patients
- Researchers, public health authorities and regulators struggle to access high-quality data because data sources are scattered and governed differently in each country
- Europe lacks a coordinated way to use health data to support innovation, crisis response and regulatory decisions
The EHDS therefore aims to create a unified legal and technical system where health data can circulate safely, with strong privacy protections, and support both primary care (direct care for patients) and secondary use (research, public health, regulatory activities).
Current legal status
The EHDS is now binding EU law. It defines rights for patients, responsibilities for healthcare providers and data holders, and governance rules for secondary use. However, while the regulation is in force, many practical elements still need to be delivered through implementing acts. These acts will specify data standards, interoperability formats, APIs and certification mechanisms that national health systems will have to follow.
The implementation will take several years because Member States need time to adjust their EHR systems, create national Health Data Access Bodies and prepare secure environments for secondary data use.
What to expect and when
Even though the legal framework entered into force in March 2025, the operational system will appear step by step. In the next two years the European Commission will issue technical standards to define what “interoperable” data mean in practice. Member States will build or adapt national systems to meet these requirements.
Parallel work includes the development of HealthData@EU, the future EU catalogue for datasets and the secure processing environments where approved researchers will work with data. Some elements already exist in pilot form but must be expanded and integrated with national infrastructures.
What the EHDS will look like in practice
For healthcare, the EHDS should make it possible for a doctor in one EU country to access a patient summary or other core health information from another Member State, presented in a consistent structure. This builds on existing services like cross-border ePrescriptions but goes further by imposing stronger rules on data format, meaning and security.
For secondary use, the EHDS introduces a structured pathway. Researchers and public authorities will be able to search for datasets through a EU catalogue, submit access requests to national Health Data Access Bodies and work inside authorised secure processing environments. Raw personal data are not meant to be transferred freely; instead, analysis will happen inside these controlled infrastructures.
Interoperability standards will play a central role. The Commission will define the technical specifications to allow systems from different countries to “speak the same language”. National systems will need to pass conformity tests to ensure they follow these standards.
Implications for patients
Patients gain stronger rights. They must be able to access their own electronic health data easily and in an interoperable format. In cross-border situations this should reduce delays and the risk that doctors work with incomplete information. The EHDS also aims to make it simpler for people who receive care in more than one Member State to share their data securely.
The regulation also introduces rules for secondary use. Member States may implement opt-out systems, but there are national differences and still many questions about how these will interact with cross-border research projects. Patient organisations have asked for transparency, clear explanations and simple tools to express preferences.
Privacy and security are central: access to data for secondary use will be allowed only inside secure processing environments with strict output controls. The goal is to balance research benefits with strong protection for individuals.
Implications for doctors and healthcare providers
Clinicians may benefit from better access to patient information, especially for cross-border care. If interoperability is achieved, patient summaries and other clinical information could be integrated more directly into local systems, reducing manual work and errors.
However, healthcare providers will face new duties. Hospitals and clinics will need to ensure their systems are compatible with the new standards and able to provide data in the required formats. They will also have obligations related to secondary-use governance, including responding to access requests and maintaining catalogues of datasets.
For clinicians involved in research, the EHDS could make access to real-world data (RWD) easier and faster, especially for multi-country studies. Approved projects will use secure processing environments to run analyses.
Professional associations have expressed concerns about administrative burden, national differences in opt-out rules and potential impact on patient trust. These topics will require careful communication and practical tools that integrate well into clinical workflows.
Remaining open and contested issues
Several challenges are still unresolved. One key issue is how opt-out mechanisms in one Member State apply to secondary-use requests involving data from several countries. Another issue is the readiness of national systems: some Member States have advanced digital infrastructures, while others will need significant investment to meet the EHDS requirements.
Technical standards also need detailed work. Without clear and testable specifications, interoperability will remain difficult to achieve.
Practical takeaways
It is important to emphasise that the EHDS is already law but its practical benefits will appear gradually. Patients should understand their rights to access and portability. Clinicians should be aware of new obligations and future integration with EU services. Researchers should follow the development of secure processing environments and the EU catalogue.
The EHDS is ambitious and will likely transform how Europe uses health data, but progress will depend heavily on technical readiness and national implementation.
Timeline and expected milestones
| Date / period | Expected milestone | Practical significance |
| March 2025 | Regulation (EU) 2025/327 enters into force | Legal framework established; implementation activities begin. |
| 2025–2026 | Implementing acts and technical specifications | Defines detailed formats, standards and interoperability rules. |
| 2025–2027 | Pilot and first deployment of HealthData@EU, catalogue and SPEs | Early secure environments and catalogue available for testing. |
| 2026–2028 | National Health Data Access Bodies and system upgrades | Member States create governance bodies and adapt EHR systems. |
| 2027 and beyond | Progressive cross-EU interoperability | More complete functionality for both primary and secondary use. |
References
Regulation (EU) 2025/327 — European Health Data Space (EHDS), EUR-Lex (Official text). https://eur-lex.europa.eu/eli/reg/2025/327/oj/eng
European Commission — EHDS regulation page (facts, timeline). https://health.ec.europa.eu/ehealth-digital-health-and-care/european-health-data-space-regulation-ehds_en
Council of the EU — press release on adoption (21 Jan 2025). https://www.consilium.europa.eu/en/press/press-releases/2025/01/21/european-health-data-space-council-adopts-new-regulation-improving-cross-border-access-to-eu-health-data/.
Arnold & Porter — summary of EHDS and HealthData@EU (Mar 2025). https://www.arnoldporter.com/en/perspectives/advisories/2025/03/european-health-data-space-regulation-published.
TEHDAS / guidance and discussion on opt-out and Health Data Access Bodies. https://tehdas.eu/.
European Patients’ Forum — analysis of EHDS (patients’ perspective) (Feb 2025). https://www.eu-patient.eu/globalassets/ehds-analysis---final.pdf
Technical interoperability work and Commission timelines (IHE/HL7/EURIDICE summaries and Commission briefings). https://health.ec.europa.eu/system/files/2023-05/ehealth_20230330_sr_en.pdf
van Drumpt S, Chawla K, Barbereau T, Spagnuelo D, van de Burgwal L. Secondary use under the European Health Data Space: setting the scene and towards a research agenda on privacy-enhancing technologies. Front Digit Health. 2025 Jun 19;7:1602101. doi: 10.3389/fdgth.2025.1602101. PMID: 40613075; PMCID: PMC12222193.
