A quiet but sweeping change is taking shape behind Europe’s hospital walls. Under the European Health Data Space, the bloc is building a system that lets patients reach their own medical records across borders and gives researchers controlled access to vast pools of health data. The framework is now in force, and member states spent 2026 standing up the authorities that will run it.
## What the Health Data Space is for
The regulation has two halves. The first, often called primary use, gives every citizen electronic access to their own health information, from patient summaries and e-prescriptions to lab results and medical images. Crucially, that data should follow a person when they travel, so a doctor in one country can read records created in another through the shared MyHealth@EU network.
The second half, secondary use, opens anonymised or pseudonymised health data to researchers, innovators and public bodies for studies, policymaking and the development of new treatments. Access runs through dedicated health data access bodies rather than direct transfers, with each request screened against a defined public-interest purpose.
## Why the safeguards matter
Handing over health data touches some of the most sensitive information people hold, so the law layers protections on top of existing privacy rules. Data cannot be used to target advertising, to raise insurance premiums or to deny someone coverage or a job, and many secondary uses come with an opt-out for citizens who refuse.
Access is also gated. Researchers receive data in secure processing environments rather than raw downloads, and identifying details are stripped out wherever the purpose allows. The aim is to unlock the research value of Europe’s health records without turning them into a commodity.
## The institutions being built
Each member state must designate a digital health authority to oversee the primary-use side and a health data access body to handle secondary-use requests. A European board will coordinate the national pieces so the system works as one space rather than 27 separate ones.
Much of 2026 has gone into this scaffolding. The substantive rights for patients and researchers switch on in stages over the following years, with the most data-rich categories among the last to arrive, giving health systems time to make records interoperable.
## What patients should expect
– Electronic access to your own records, shareable across borders.
– A ban on using your health data for ads, insurance pricing or hiring.
– An opt-out covering many secondary uses of your data.
– A staged rollout, with full features phased in over several years.
## What happens next
The hard part is technical. Hospitals and clinics still store records in incompatible formats, and making them speak to one another is the precondition for the whole project. As national authorities come online, the test will be whether a patient summary written in one language and one system can be read safely in another, which is the everyday promise the Health Data Space is meant to keep.




