For Data Users | EHDS2-CY

Using health data responsibly for research, innovation and public value

Researchers, universities, public authorities, healthcare organisations, research infrastructures, SMEs, and other eligible organisations may be able to request access to electronic health data for approved secondary-use purposes.

Access to health data is subject to legal, ethical, technical, organisational, and security requirements designed to protect privacy and ensure responsible use.

Who is a Health Data User?

A health data user is an organisation or individual authorised to use health data for purposes permitted under the EHDS.

Examples include:

Universities
Research institutes
Public authorities

Healthcare organisations

Research infrastructures

SMEs and start-ups

Industry researchers

Permitted purposes

The EHDS supports access to health data for purposes such as:

Scientific research
Innovation activities

Development and validation of AI systems

Public health activities

Health policy development

Official statistics

Regulatory activities

Research and innovation activities may be conducted by both public-sector and private-sector organisations, subject to applicable requirements and approvals.

Your pathway to health data access

1. Define your purpose

Clearly explain:

The research, innovation, policy or public health objective
The expected public value or scientific benefit
Why the requested data are necessary
Why the requested scope is proportionate
The expected outputs and outcomes

2. Discover relevant datasets

Dataset catalogues help potential users identify datasets that may support their work.

Available information may include:

Responsible organisation
Population coverage
Time period
Data types and standards
Access conditions
Data quality information

Please note: Dataset availability does not guarantee access approval

3. Assess dataset suitability

Before applying, consider:

Population coverage
Time period relevance
Available variables
Data quality and completeness
Potential limitations or bias
Data linkage requirements

Where available, data quality information may support this assessment.

4. Prepare your application

A complete application should include:

Applicant organisation details
Project description and objectives
Expected public benefit
Research protocol or analytical plan
Ethical review information (where applicable)
Requested datasets and variables
Security and privacy measures
Authorised project team members

5. Application assessment

Under the EHDS framework, applications are assessed for:

Completeness
Justification and proportionality
Compliance with applicable legal requirements
Privacy and security safeguards
Alignment with the requested purpose

Additional information may be requested during the assessment process.

6. Secure data analysis

Approved users will access data through a Secure Processing Environment designed to:

Restrict access to authorised users only
Enforce permit conditions
Protect privacy and confidentiality
Support auditing and oversight
Control the release of results

Access to health data must comply with the conditions of the relevant authorisation.

Privacy and security responsibilities

Data users must:

Use data only for approved purposes
Respect permit conditions
Implement appropriate security measures
Maintain confidentiality
Comply with GDPR and applicable legislation
Request only the data necessary for their work
Avoid any attempt to identify individuals
Respect all applicable access restrictions

Data user checklist

Before submitting your request, make sure that:

You have a clear secondary-use purpose
You can demonstrate public value
You are requesting only the data you need
You have reviewed dataset information and limitations
You have prepared all required documentation
You understand that access requires approval
You will analyse approved data in a secure environment
You will not attempt to identify individuals

Frequently asked questions

Who can access health data?

Only eligible applicants with an approved secondary-use purpose and the necessary authorisation.

Does inclusion in the dataset catalogue guarantee access?

No. The catalogue supports discovery only. Access remains subject to assessment and approval.

Can I download raw health data?

No. Approved access to individual-level electronic health data will normally take place within a Secure Processing Environment. The applicable permit and access conditions will determine how data and authorised outputs may be accessed or released.

Can health data be linked with other datasets?

Potentially, provided this is clearly described in the application and approved during assessment.

Disclaimer: This page provides introductory guidance. Detailed eligibility criteria, application procedures, and operational requirements will be published when the national services become available.