Tallinn: The transition phase under the European Health Data Space regulation is no longer a paper exercise for hospital administrators on the eastern flank of the Union. With Regulation 2025/327 in force since late March 2025 and the first interoperability certification window having closed in January, ministries from the Baltic to the Iberian coast are now compiling the detailed compliance returns that the Commission will treat as the baseline measurement for the primary use of patient records.
Estonia, which has long anchored its public services on a national digital identity backbone, has used the spring to convert its existing X-Road exchanges into the format that MyHealth@EU expects. The national health authority has confirmed that the country will be among the first to attest the full set of priority data categories, including patient summaries, ePrescriptions, ePrescription dispensations and medical images, and intends to publish a public dashboard tracking each hospital network as it joins the cross-border environment. The pattern is being watched closely in Vienna and Madrid, where ministerial teams are wrestling with regional health authorities that operate on different vendors and different identifier schemes.
The regulation sets a long horizon for the priority data categories, with the deadline for full cross-border exchange across the twenty-seven member states fixed at March 2029. The intermediate steps, however, leave less slack than the headline date suggests. National Digital Health Authorities had to be designated by June 2025, and the Commission expects to begin reviewing the operational independence of these bodies during the autumn. Health Data Access Bodies, which will police the secondary use of health information for research, public health work and policy development, must be in place by March 2027. Drafting work has begun in nineteen capitals, but only a handful have moved past the public consultation stage.
The TEHDAS2 joint action, which closes its work programme in December 2026, has been pumping out reference architectures and trust-framework templates intended to keep procurement specifications aligned across member states. Officials inside the consortium privately concede that the larger health systems will need to invest considerable budget in middleware before the cross-border calls can scale. Industry submissions during the May consultation round flagged the cost of remapping legacy clinical terminologies, with some hospital groups warning that without dedicated transition funding the certification timetable will slip into 2027.
For electronic health record vendors, the most contentious question remains the labelling regime that the Commission is expected to clarify before summer recess. Suppliers selling into the European market will have to attach a conformity certificate to each module that handles the priority data categories, and the draft implementing acts circulated in early May suggest that retesting will be required whenever a vendor changes its data model in a non-trivial way. The European MedTech industry association used its annual policy day to argue for a longer grace period for software-as-a-medical-device products that already carry CE marks under the medical devices regulation.
Member states are also working through the secondary use side of the file. Researchers and public sector analysts will be able to request structured access to anonymised or pseudonymised health datasets, with applications routed through the new access bodies and decisions logged in a public register. The Commission has signalled that it intends to monitor the early caseloads closely, partly to address concerns from civil society groups that secondary use must not erode patient consent. With elections in three member states scheduled for autumn, ministries are racing to lock down the procedural texts before any political cycle forces fresh negotiations.
