Inside the EHDS Machine: Europe’s Ambitious Health Data Overhaul Enters High Gear-But Who Holds the Power?
The EU’s new health data space is moving from blueprint to reality, but as rules are written on the fly, industry voices dominate-and patients are left in the dark.
In the shadowy corridors of Brussels, a new digital leviathan is awakening. The European Health Data Space (EHDS)-once a distant regulatory vision-is now roaring to life. With the EU’s official committee operational, new rules landing, and industry insiders shaping the very foundations of Europe’s health data future, the pace is dizzying. But as the gears turn, a crucial question emerges: whose interests are truly being served-and who’s watching the watchers?
The EHDS, established by EU Regulation 2025/327, aims to create the first unified architecture for health data across Europe. This is no mere bureaucratic shuffle: it’s a continent-wide effort to standardize how patient data flows for both care and research, with deadlines and technical requirements that will reshape the medical, biotech, and digital health industries.
The recent activation of the EHDS Committee marks a turning point. This body will coordinate everything from patient access to electronic health records (EHRs) to the secondary use of anonymized data for research and AI development. With dual leadership-one foot in the Commission, one among the Member States-the Committee can form technical subgroups and call in cyber and privacy experts. Its role is pivotal: guiding how data is shared, who gets access, and under what conditions.
But the rules are still being forged. The latest FAQs from the Commission’s DG SANTE answer burning industry questions: medical device makers must ensure their products comply with EHDS standards if they interact with EHRs, even as overlapping regulations are rewritten. Data access for research is tiered-public institutions can get ongoing data updates, but private firms face higher procedural hurdles. Disputes over access and opt-outs straddle multiple authorities, creating a complex oversight web.
Meanwhile, TEHDAS2-the technical action group-has become a testbed for participatory rulemaking. Consultations have drawn hundreds of responses, mostly from institutions and industry, shaping everything from data tariffs to citizen notification processes. Yet, conspicuously absent are ordinary patients, whose data underpins the entire project.
The regulatory ecosystem is further complicated by the looming Digital Omnibus. Proposed changes could dissolve the Data Governance Act, redefine what counts as personal data, and harmonize what “scientific research” means across the EU. While some changes may ease legal uncertainty for researchers, others threaten to shrink privacy guarantees for pseudonymized health data.
The timeline is relentless: by 2029, most health data holders-hospitals, insurers, device makers, even startups-must comply or risk exclusion. Micro-enterprises are spared, but for everyone else, the time to audit, adapt, and engage is now. The third and final TEHDAS2 consultation in mid-2026 is the last real chance for stakeholders to shape the operational details before the system locks in.
As Europe’s health data machine accelerates, the pace of change is unprecedented-and so is the participatory chaos. Laws, technical specs, and interpretations are being written in parallel, not sequence. Those who engage now are not just following the rules; they’re helping to write them. But with the patient voice largely missing, the project’s legitimacy-and long-term success-may hinge on building public trust before the EHDS becomes an empty shell, rich in potential but poor in real, usable data.
WIKICROOK
- EHDS: EHDS is the EU’s initiative to securely unify health data sharing, improving privacy, security, research, and healthcare across European countries.
- EHR: EHR stands for Electronic Health Record, a digital system storing patient medical data that requires strong cybersecurity to protect sensitive health information.
- TEHDAS2: TEHDAS2 is an EU project developing technical guidelines for the secure, ethical secondary use of health data in research across Europe.
- Health Data Access Bodies (HDAB): HDABs are national authorities that approve and monitor access to health data for research or secondary purposes, ensuring compliance and privacy.
- Data Permit: A data permit is official authorization to access specific health data for defined purposes, with strict controls on use, access, and duration.
