Navigating the European Health Data Space Regulation: An (Uneasy) Marriage Between EHDS and GDPR
The European Health Data Space Regulation (EHDS Regulation) took effect on March 26, 2025. Most of its secondary use provisions will apply from March 2029, and implementation at EU and Member State level will have to take place between 2027 and 2035. Health data represents over 30% of the world’s data assets, yet less than 3% is utilized for secondary purposes such as research, regulatory, or public health purposes, a persistent “data-to-value” gap. This update examines how the EHDS Regulation seeks to close that gap by introducing a more prescriptive legal framework for access to health data for (certain) secondary use purposes whilst still aligning with requirements under EU privacy law; and what life sciences companies should be doing now to anticipate such secondary use obligations, data access requests, and opportunities.

