Dynamic Certifications for Dynamic Standards Leveraging ENTRUST’s Real-time Conformity Certificates to Strengthen Regulatory Compliance with the GDPR, MDR, CRA and NIS2

Recent developments in the European healthcare landscape and the rapidly evolving technologic ecosystem have led to the adoption of a new range of regulations that, amongst other key features, increasingly depend on standardization, and recognize the viability of certifications for demonstrating regulatory compliance. This paper examines shortcomings in existing guidelines and standardization approaches, while showcasing the results of both the ENTRUST project, as well as the Europrivacy and Interprivacy certification schemes, as potential ways forward to enable a streamlined approach to regulatory compliance with cybersecurity and privacy requirements through modular and ICT-supported third-party certification. It presents some perspectives regarding the potential of this approach in broader standardization activities and identifies key advantages of the proposed model for the various players in the healthcare sector.