The European Health Data Space (EHDS): What Healthcare Developers Need to Know
A technical breakdown of the EHDS regulation — what it means for EHR vendors, health tech startups, and integration engineers building for the European market.
Ala Ben Aicha

Introduction
The European Health Data Space (EHDS) regulation, published in the EU Official Journal on February 5, 2025, is the most significant piece of healthcare data legislation Europe has ever produced. It fundamentally changes how electronic health data is accessed, shared, and reused across the EU — and it directly impacts every developer, vendor, and health tech company operating in the European market.
As someone who builds healthcare integration systems and works with HL7, FHIR, and cross-border data exchange, I have been tracking the EHDS closely. This is not just another compliance checkbox — it is a structural shift that will reshape the European health tech landscape over the next decade.
What the EHDS Actually Does
The EHDS establishes two pillars:
Primary Use — Patient-Controlled Health Data Access
Citizens gain enforceable rights to access and share their electronic health data across borders. Healthcare providers must make specific categories of data available in interoperable formats:
- Patient summaries — demographics, allergies, medications, conditions, procedures
- ePrescriptions and eDispensations — cross-border prescription filling
- Laboratory results — structured lab reports with standardized coding
- Medical imaging and reports — DICOM studies with diagnostic reports
- Hospital discharge summaries — structured discharge data
This is not optional. EHR systems that serve EU healthcare providers will need to support these data categories in standardized formats — and address the applicable EHR-system conformity requirements.
Secondary Use — Health Data for Research and Innovation
A new framework allows anonymized or pseudonymized health data to be accessed for research, policy-making, and innovation through regulated Health Data Access Bodies in each member state. This creates opportunities for AI training, population health studies, and clinical research at a scale Europe has never had.
The Timeline That Matters
Here is the implementation roadmap developers need to plan around:
| Milestone | Date | Impact |
|---|---|---|
| Regulation enters into force | March 26, 2025 | Clock starts |
| National Digital Health Authorities appointed | June 2025 | Governance bodies established |
| EHR certification requirements defined | By March 2027 | Commission adopts implementing acts |
| Primary use provisions apply | March 26, 2029 | Patient summaries and ePrescriptions mandatory |
| Full primary use (all data categories) | March 26, 2031 | Lab results, imaging, discharge summaries |
| Secondary use framework operational | March 26, 2029 | Health Data Access Bodies active |
The March 2029 deadline for patient summaries and ePrescriptions is the first hard target. If you are building or maintaining an EHR system used in the EU, your interoperability roadmap should already account for this.
Technical Implications for Developers
EHR System Certification
The EHDS introduces a mandatory certification scheme for EHR systems. Article 28 requires that EHR systems placed on the EU market meet interoperability, security, and logging requirements. This mirrors how the CE marking works for medical devices — you will need to demonstrate compliance through a conformity assessment.
Key technical requirements include:
- Interoperability with the European EHR Exchange Format — based on HL7 FHIR and IHE profiles
- Structured data export in standardized formats (no more proprietary lock-in)
- Audit logging of all data access and sharing events
- API-based data access for authorized third-party applications
- Semantic interoperability using international terminologies (SNOMED CT, LOINC, ICD-10, ATC)
The European EHR Exchange Format
The Commission will define the exact exchange format through implementing acts, but the technical direction is clear from the MyHealth@EU infrastructure and the existing eHealth Digital Service Infrastructure (eHDSI):
European EHR Exchange Format
├── Transport Layer
│ ├── HL7 FHIR R4/R5 RESTful APIs
│ └── IHE MHD (Mobile Health Documents)
├── Document Formats
│ ├── FHIR Documents (Patient Summary → IPS)
│ ├── CDA R2 (transitional support)
│ └── HL7 FHIR Structured Data Capture
├── Terminology
│ ├── SNOMED CT (clinical terms)
│ ├── LOINC (lab observations)
│ ├── ICD-10/ICD-11 (diagnoses)
│ ├── ATC (medications)
│ └── EDQM (dosage forms, routes)
└── Identity & Security
├── eIDAS 2.0 (citizen identity)
├── HPD (Healthcare Provider Directory)
└── SAML/OAuth2 (authorization)
If you have been building with FHIR, you are already well-positioned. The International Patient Summary (IPS) profile — hl7.fhir.uv.ips — is the baseline document standard for cross-border patient summary exchange.
MyHealth@EU Infrastructure
MyHealth@EU is the operational cross-border health data exchange infrastructure. It has been running since 2019 for ePrescriptions and patient summaries between participating countries. The EHDS makes participation mandatory and expands the scope.
The architecture follows a federated model:
Country A Country B
┌──────────────┐ ┌──────────────┐
│ EHR System │ │ EHR System │
│ (Hospital) │ │ (Pharmacy) │
└──────┬───────┘ └──────┬───────┘
│ │
┌──────▼───────┐ ┌──────▼───────┐
│ National │ │ National │
│ Contact │◄────────────────►│ Contact │
│ Point for │ MyHealth@EU │ Point for │
│ eHealth │ Gateway │ eHealth │
│ (NCPeH) │ │ (NCPeH) │
└──────────────┘ └──────────────┘
Each country operates a National Contact Point for eHealth (NCPeH) that translates between national health data formats and the European exchange format. As a developer, you will interact with your national infrastructure — not directly with MyHealth@EU. But understanding this architecture helps you design systems that are EHDS-ready.
What You Should Be Doing Now
1. Audit Your Data Model
Map your system's clinical data to the EHDS priority categories. Can you generate an IPS-compliant patient summary from your current data model? Most systems I have worked with require significant mapping work to align with the IPS resource profiles — particularly around medication coding (national drug codes to ATC) and diagnosis terminology (local codes to ICD-10/SNOMED CT).
2. Implement FHIR R4 APIs
If your system does not have FHIR APIs yet, start now. The EHDS exchange format will be FHIR-based. Specifically, focus on:
Patient,Condition,MedicationStatement,AllergyIntolerance,Procedureresources- The IPS
BundleandCompositionprofiles - FHIR
DocumentReferencefor imaging and lab reports - SMART on FHIR for third-party application access
3. Adopt Standard Terminologies
The EHDS requires semantic interoperability — meaning structured, coded data using international terminologies. If your system still relies on free-text fields or local code systems, plan a terminology migration. SNOMED CT licensing is being expanded across EU member states specifically to support EHDS compliance.
4. Plan for Certification
Start documenting your system's interoperability capabilities, security measures, and data handling practices. The certification scheme will require evidence of compliance — treating it as an afterthought will be expensive.
Opportunities for Health Tech Companies
The EHDS is not just a compliance burden — it creates significant market opportunities:
- Cross-border care platforms that leverage standardized data exchange
- Clinical decision support tools that work across EHR systems using FHIR APIs
- Population health analytics powered by secondary use data access
- Patient-facing applications that aggregate health data from multiple providers
- Terminology mapping services to help legacy systems achieve semantic interoperability
The companies that invest in EHDS readiness early will have a significant competitive advantage as the regulation comes into full effect.
Conclusion
The EHDS is the most ambitious health data regulation globally. It will take years to fully implement, but the technical direction is clear: FHIR-based interoperability, standardized terminologies, EHR-system conformity requirements, and patient-controlled data sharing. The organizations that start preparing now — rather than waiting for enforcement deadlines — will be best positioned in the European health tech market.
If you are planning your EHDS readiness strategy and need guidance on FHIR implementation, terminology mapping, or integration architecture, I am happy to help.