How health data can support society
Using health data responsibly beyond direct care
Health data help healthcare professionals provide care every day. They can also support research, innovation, public health planning, prevention programmes, and evidence-based policymaking when used responsibly. This is known as the secondary use of health data.
​
Secondary use does not mean that personal health information becomes public or freely accessible. The EHDS is designed to enable the safe and controlled use of health data while protecting privacy and individual rights.
Why does secondary use matter?
Responsible use of health data can help:​
​​​​​
-
Improve healthcare services
-
Support medical and scientific research
-
Develop better treatments and health technologies
-
Improve public health planning and prevention programmes
-
Strengthen healthcare systems
-
Support evidence-based policy decisions
-
Encourage innovation that benefits patients and healthcare professionals
​​
The aim is to generate knowledge and public value while maintaining strong safeguards for privacy and confidentiality.
How is your data protected?
The EHDS framework includes multiple safeguards to protect individuals and their personal data.​​​​​​
​
Controlled Access
Organisations seeking access to health data must submit a request and clearly justify why the data are needed.
​​
Independent Assessment
Requests are assessed against legal, ethical, privacy, and security requirements.
​​
Purpose-Limited Use
Data may only be used for the approved purpose and under defined conditions.
​
Secure Processing Environments
Approved users analyse data within secure environments that are specifically designed to protect sensitive information.
​​
Authorised Users Only
Access is restricted through identity verification, role-based permissions, and access controls.
​​
Output Review
Results may be reviewed before being released to reduce the risk of revealing identifiable information.
​​
Accountability and Oversight
Access and processing activities may be logged and monitored to support transparency, accountability, and compliance.​
​​
These safeguards support GDPR principles and the protection of personal data.
What does secondary use not mean?
Secondary use of health data does not mean that:​
​​​​​​​
-
Medical records become public
-
Researchers can freely download health data
-
Organisations can access data without approval
-
Data can be used for any purpose without assessment
-
Approved users can freely identify individuals
-
Personal data can leave secure environments without safeguards
​​
Access is subject to legal, organisational, and technical controls.
Can I opt-out?
Under the EHDS, individuals have the right to opt out of the future secondary use of their personal electronic health data.
​
Where an individual exercises this right:​
​​​​​​​
-
Future secondary-use activities must respect the opt-out
-
Existing approved projects remain unaffected
-
The opt-out applies to future secondary-use activities
​​​
Detailed national arrangements will be published by the competent authorities as implementation progresses.
Frequently asked questions
Will my health data be visible to the public?
No. Public information may relate to datasets, services, or projects, not individual patient records.
Can researchers access data without permission?
No. Access requires an application, assessment, and approval process.
Will health data always be anonymous?
The safeguards applied depend on the purpose, data type, and legal requirements. Measures such as anonymisation, pseudonymisation, access controls, and secure processing environments help protect privacy and minimise the risk of identifying individuals.
Who can I contact with questions?
Please use the project Contact page for enquiries, feedback, or requests for further information.
Disclaimer: This page provides general information for awareness and educational purposes. It does not replace applicable legislation, official guidance, or legal advice.