Understanding the secondary use of health data
The EHDS is a European framework that enables the secure and responsible use of electronic health data across the European Union.
The EHDS supports the use of health data for:
-
Scientific research
-
Innovation and development of new health solutions
-
Public health activities
-
Health policy and decision-making
-
Regulatory activities
-
Official statistics
The CY-EHDS-2ND project supports Cyprus in preparing the governance, infrastructure, and operational capabilities required to participate in this European framework.
What is secondary use of health data?
Secondary use refers to the use of existing health data for purposes other than the direct care of an individual patient.
Examples include:
-
Medical and scientific research
-
Development and validation of innovative technologies and AI systems
-
Public health planning
-
Health system improvement
-
Regulatory and policymaking activities
All access to health data for secondary use must comply with applicable legal, ethical, organisational, and technical safeguards.
What is a Health Data Access body (HDAB)?
Under the EHDS, Member States are required to establish HDABs.
An HDAB is responsible for:
-
Receiving and assessing health data access requests
-
Issuing data permits where appropriate
-
Ensuring compliance with legal and security requirements
-
Protecting privacy and confidentiality
-
Facilitating access through secure environments
The CY-EHDS-2ND project supports preparations for the future operation of these capabilities in Cyprus.
What is HealthData@EU?
HealthData@EU is the European infrastructure that will support cross-border secondary use of health data.
It will enable:
-
Discovery of datasets across Europe
-
Cooperation between national Health Data Access Bodies
-
Common procedures for data access requests
-
Secure cross-border use of health data for approved purposes
Choose your learning path
👩🔬 Data Users
For researchers, universities, innovators, public authorities, and other organisations seeking access to health data.
Explore:
-
Secondary-use purposes
-
Data access processes
-
Secure data analysis
-
User responsibilities and safeguards
🏥 Data Holders
For hospitals, healthcare providers, registries, laboratories, biobanks, insurers, and other organisations that manage health data.
Explore:
-
Dataset catalogues and metadata
-
Data quality requirements
-
Data holder responsibilities
-
Supporting lawful access requests
⚖️ HDAB Staff & Institutions
For organisations involved in governance, oversight, and implementation of secondary use services.
Explore:
-
EHDS governance
-
Access request assessment
-
Compliance and security
-
National implementation activities
👥 Citizens & Public
For anyone wishing to understand how health data can support research, innovation, and better healthcare.
Explore:
-
What secondary use means
-
Privacy protections
-
Public benefits
-
Rights and safeguards
How does secondary use work?
1. Discover datasets
Authorised users identify relevant datasets through dataset catalogues and metadata descriptions.
2. Submit a request
Eligible organisations submit an application for access for an approved purpose.
3. Assessment by HDAB
Requests are evaluated against legal, ethical, privacy, and security requirements.
4. Data preparation
Relevant health data holders prepare authorised datasets in accordance with applicable requirements.
5. Secure analysis
Approved users access data within a Secure Processing Environment.
6. Safe results
Only authorised outputs may leave the secure environment following applicable controls.
What is being developed in Cyprus?
Through the CY‑EHDS‑2ND, Cyprus is preparing the foundations for a national ecosystem supporting the secondary use of health data.
Project activities include:
-
Data access applications management solution
-
National health dataset catalogue
-
Secure processing environment
-
Health data quality enhancement tools
-
National connection to HealthData@EU
-
Governance and operational preparations for the future HDAB
Important notice
CY-EHDS-2ND is an EU-funded project supporting Cyprus's preparation for the EHDS. The information published on this website is provided for awareness, education, and training purposes. Services, procedures, and operational arrangements related to health data access will be published and updated as they become available through the relevant competent authorities.