Impact of the EHDS on manu­fac­tu­r­ers of medi­cal pro­ducts and IVDs

What is the EHDS?

The Euro­pean Health Data Space (EHDS) is a key com­po­nent of the Euro­pean Health Uni­on and the first sec­to­ral EU data space.
The EHDS is inten­ded to give indi­vi­du­als more con­trol over their health data, but also to faci­li­ta­te cross-border data exch­an­ge “for the pur­po­se of pro­vi­ding health ser­vices”. It also aims to crea­te a sin­gle mar­ket for elec­tro­nic health record sys­tems and a secu­re envi­ron­ment for rese­arch, inno­va­ti­on and regu­la­ti­on. The regu­la­to­ry basis of the EHDS is for­med in par­ti­cu­lar by exis­ting EU legal acts such as the GDPR, the Data Gover­nan­ce Act, the Data Act, the Net­work and Infor­ma­ti­on Sys­tems Direc­ti­ve, but also the MDR and IVDR. The­se over­ar­ching frame­works encom­pass regu­la­ti­ons, inclu­ding safe­ty mea­su­res, that also app­ly to the health sec­tor. Howe­ver, given the par­ti­cu­lar sen­si­ti­vi­ty of health data, the EHDS is sup­ple­men­ted by addi­tio­nal, sector-specific pro­vi­si­ons. After the EU Com­mis­si­on alre­a­dy published a pro­po­sal for a regu­la­ti­on on the Euro­pean Health Data Space (EHDS Regu­la­ti­on) in May 2022, the two other EU legis­la­ti­ve actors, the EU Par­lia­ment and the Coun­cil of the EU, have adopted the new regu­la­ti­on on the EHDS. The regu­la­ti­on will now be for­mal­ly signed by the Coun­cil of the EU and the EU Par­lia­ment and will enter into force 20 days after its publi­ca­ti­on in the Offi­ci­al Jour­nal of the EU.

Oppor­tu­ni­ties and risks of the EHDS for manu­fac­tu­r­ers of medi­cal devices and IVDs

The EHDS addres­ses com­mer­cial enter­pri­ses with the fol­lo­wing pro­mi­se: “You will bene­fit from the grea­ter avai­la­bi­li­ty of elec­tro­nic health data, enab­ling the use of data for appli­ed rese­arch and inno­va­ti­on”.

For the medi­cal tech­no­lo­gy indus­try, it is cru­cial that the secon­da­ry use of health data also includes pro­duct deve­lo­p­ments that can poten­ti­al­ly con­tri­bu­te to public health. Artic­le 53(1)(a) of the EHDS Regu­la­ti­on in its cur­rent ver­si­on makes it pos­si­ble to do just that: The access points for health data grant […] access to data for secon­da­ry use when the­re is a public inte­rest in the area of […] public health moni­to­ring or acti­vi­ties to ensu­re high qua­li­ty and safe­ty stan­dards of health care, inclu­ding pati­ent safe­ty, as well as medi­ci­nes or medi­cal devices. In the field of sci­en­ti­fic rese­arch that con­tri­bu­tes to the assess­ment of health tech­no­lo­gies or ensu­res a high level of qua­li­ty and safe­ty of health­ca­re, medi­ci­nes or medi­cal devices, secon­da­ry use is also envi­sa­ged for trai­ning, test­ing and eva­lua­ti­on of algo­rith­ms, inclu­ding in medi­cal devices, IVDs, AI sys­tems and digi­tal health appli­ca­ti­ons. The use of data for new pro­duct deve­lo­p­ments and impro­ve­ments is not limi­t­ed to medi­cal soft­ware and AI-based medi­cal devices, but also includes ana­lo­gue medi­cal devices.

The fact that medi­cal devices, IVDs and AI sys­tems will recei­ve fur­ther addi­tio­nal regu­la­ti­on with the EHDS, which must be har­mo­nis­ed with exis­ting regu­la­ti­ons, could have a dis­ad­van­ta­ge­ous effect. In addi­ti­on, it must be ruled out that no infor­ma­ti­on rela­ting to trade secrets or intellec­tu­al pro­per­ty of com­pa­nies is used for secon­da­ry data use.

Con­clu­si­on and recom­men­da­ti­on for action

The EHDS pro­mi­ses an inno­va­ti­on boost for the health­ca­re indus­try, but it ent­ails increased regu­la­to­ry requi­re­ments. While manu­fac­tu­r­ers can bene­fit from sim­pli­fied data access and secon­da­ry use of data on the one hand, the­re is a risk of a cer­tain over­re­gu­la­ti­on on the other, which could inten­si­fy com­pe­ti­ti­on due to open data, com­pro­mi­se intellec­tu­al pro­per­ty and thus pos­si­bly slow down invest­ments in new medi­cal tech­no­lo­gies.
Com­pa­nies should the­r­e­fo­re proac­tively deal with the new requi­re­ments and include them in their com­pli­ance stra­tegy at an ear­ly stage. Once again, the fol­lo­wing appli­es: Com­pli­ance with the MDR or IVDR alo­ne is not enough. Con­ti­nuous ana­ly­sis and obser­van­ce of all legal frame­work con­di­ti­ons is essen­ti­al to achie­ve 360° compliance.

back

Stay up-to-date

We use your email address exclusively for sending our newsletter. You have the right to revoke your consent at any time with effect for the future. For further information, please refer to our privacy policy.