1What is it?
The European Health Data Space (EHDS) is a large-scale EU initiative to create a unified digital infrastructure allowing health data — medical records, prescriptions, lab results, genomic data — to flow across EU member states. It has two pillars: 'primary use', meaning patients can access and share their own data across borders, and 'secondary use', meaning anonymised health data can be accessed by researchers, pharmaceutical companies, insurers and public authorities for analysis. Concretely, it involves building national health data access bodies in each country, interconnected EU systems, and a legal framework obliging member states to make citizens' health data available. Citizens can opt out of secondary use in some cases, but the default in many scenarios is inclusion. It is not merely a health tool — it is one of the largest personal data infrastructure projects ever undertaken by a public institution.
2What is it officially for?
The official objectives declared by the European Commission include improving continuity of care for patients travelling or moving within the EU by giving healthcare providers access to their medical history. The EHDS also aims to accelerate medical research, support public health policy and enable AI-driven healthcare innovation through large-scale access to health datasets. Institutions present it as patient-empowering, citing new rights to access, correct and transfer personal health records. The secondary use framework is officially framed as strictly regulated, anonymised and serving only public interest purposes. However, civil society organisations, data protection advocates and several national Data Protection Authorities have raised serious concerns that consent mechanisms are weak, opt-out systems are insufficient, and that commercial actors — including pharmaceutical firms — stand to benefit significantly from accessing sensitive health data at scale.
3What it can change for citizens
On the positive side, citizens travelling within the EU could have their prescriptions recognised and medical history accessible to emergency doctors abroad, which represents a genuine safety benefit. Patients gain formal rights to download, share and correct their health records through standardised national portals. However, citizens' most sensitive personal data — diagnoses, genetic information, mental health records, reproductive history — will by default be available for 'secondary use' by a wide range of actors including private companies, unless citizens actively opt out where that option exists. The opt-out right is not guaranteed uniformly across all member states or all data categories. Critics warn that many citizens will not be aware their data is being used, and that the line between public research and commercial exploitation of health data is dangerously blurred in the current framework.