Introduction
The European Health Data Space (EHDS), published in March 2025, changes how electronic health data is governed, shared and reused across the EU.
For Electronic Health Record (EHR) vendors and users, interoperability, auditability and compliance become baseline requirements. EHRs become regulated assets that must support patient rights, controlled secondary use and demonstrable governance at scale.
This represents a move away from informal or ad hoc data sharing towards a structured, permit based secondary use model supported by safeguards, oversight and national Health Data Access Bodies. It will produce large, diverse and quality checked datasets to support research, innovation and policy development. Interoperability is no longer optional: any EHR system placed on the EU market must be capable of supporting standardised, cross border data sharing
EHDS will be implemented in phases through to the early 2030s. Key milestones include the establishment of national Digital Health Authorities and Health Data Access Bodies, followed by mandatory exchange of priority health data categories such as patient summaries and electronic prescriptions.
The obligations do not apply all at once, but the foundational work required to meet them, covering governance, data quality, metadata and operating models, will take time to put in place.
What this means in practice
For EHR vendors operating in Ireland
EHDS raises the bar for market participation alongside the HSE’s One Health Record. Any system deployed in the Irish health system must be capable of supporting EU wide interoperability standards and evolving patient access rights over time.
For vendors engaging with the HSE, this creates a dual obligation: meeting Irish public sector requirements today while demonstrating alignment with EHDS certification, logging and interoperability expectations as they phase in from 2027.
In practice, this reduces tolerance for proprietary lock in and shifts competition towards vendors that can evidence long term compliance, transparent data handling and readiness for regulated secondary use under HealthData@EU and HealthData@IE
For the HSE and Irish healthcare providers
EHDS intersects directly with the One Health Record programme and wider digital reform. As the largest health data holder in the State, the HSE will be expected to support strengthened patient access rights while also preparing to operate within Ireland’s emerging Health Data Access Body model.
HIQA is clear that governance, data quality and interoperability preparation need to begin well in advance of the 2029–2031 secondary use implementation window. This makes EHDS readiness an immediate organisational and leadership challenge.
For life sciences companies based in or operating from Ireland
EHDS changes both access to data and expectations of conduct. Ireland’s position as a European hub for pharmaceuticals, medtech and digital health means companies will increasingly engage with EHDS through regulated secondary use pathways rather than bespoke data sharing arrangements.
HealthData@IE establishes a route for access to Irish health datasets for research, innovation and post market evidence generation, but under stricter safeguards, transparency requirements and ethical oversight. That means more consistent access to population scale data but also a higher bar for internal governance, accountability and alignment with public trust expectations.
EHR certification and market surveillance
EHDS also introduces a harmonised EU framework for EHR system requirements, certification and market surveillance. Systems must meet defined interoperability, logging and security requirements, and Member States are responsible for supervising compliance through designated national authorities.
For vendors supplying organisations in Ireland, EHDS compliance extends beyond the procurement and go live stages. Regulatory expectations now span the full implementation lifecycle.
For the HSE and other public healthcare bodies, this shifts risk considerations upstream. Selecting an EHR platform becomes a decision about long term regulatory alignment rather than just one focused on functionality or cost.
EHDS market surveillance reinforces the need for contractual clarity on compliance responsibilities, upgrade paths and assurance, particularly as Ireland builds core national infrastructure aligned with EHDS through One Health Record and HealthData@IE.
Building the foundations
Five foundational questions are worth examining now:
- Provenance and auditability: Can you show where data originated, how it has been amended and who has accessed it, so reuse decisions are defensible?
- Meaning and metadata: Do data elements mean the same thing across services, supported by agreed definitions and usable metadata?
- Operating model: Are accountability, workflows, escalation routes and controls clearly defined for handling secondary use requests?
- Transparency and ethics: Can you clearly explain secondary use, evidence safeguards and route decisions through appropriate ethical governance?
- Data quality: Is data demonstrably fit for reuse (complete, consistent and linkable) rather than being simply stored in systems?
EHDS implementation will be phased over several years, but the preparation work is substantial. In our experience working with health organisations, the weakest foundations tend to be the least visible: metadata that was never standardised, accountability gaps that only surface when a secondary use request arrives, data quality issues that were assumed rather than tested.
Governance, data quality and semantic consistency are not problems that lend themselves to quick fixes. But organisations that build these foundations early will be better placed to use EHDS for what it is designed to enable: consistent access to high-quality, population-scale data for research, innovation and better care.
About our expert
