Moving forward with the European health data space: the need to restore trust in European health systems

The European institutions reached an agreement on the regulation of European Health Data Space (EHDS) on March 15th, 2024, after three months of intense negotiations that prolonged beyond the original deadline. Harmonizing the needs and priorities of all stakeholders takes time; yet, we critically argue that heated negotiations and fragmentation of the solutions unquestionably shake the cornerstone of the project: Trust. In May 2022, the European Commission (EC) presented the EHDS as a framework that would revolutionize European health systems. This space was meant to upgrade the primary use of health data, providing citizens with immediate access to their electronic health records and enabling data sharing with health professionals cross-border. Moreover, the EHDS was set to create a robust legal framework for the secondary use of health data (i. e. , the use of health records for research, innovation and policymaking). This promising proposal soon encountered its sticking point: Under a framework that aimed to "empower individuals to have control over their health data", 1European CommissionEuropean health union: a European health data space for people and science. European Commission, Brussels2022https: //ec. europa. eu/commission/presscorner/detail/en/ip₂2₂711Google Scholar what should be the most appropriate consent scheme? In December 2023 the European Parliament amended the original EC's proposal to include the right to opt-out of the processing health data for secondary use, and stipulated that an opt-in mechanism should be put in place for particularly sensitive health data, including genetic information. Also in December 2023, the Council of the EU reached its position, introducing that members states (MS) should retain control over the decision to implement an opt-out mechanism. The aftermath? The provisional agreement states that MS will be able to allow patients to opt-out their health data being accessed (both for primary and secondary use) and to implement stricter procedures to access sensitive data. 2Council of the European UnionEuropean health data space: council and parliament strike deal. Council of the EU, 2024Google Scholar According to the EC "Trust is a fundamental enabler for the success of the European Health Data Space". 1European CommissionEuropean health union: a European health data space for people and science. European Commission, Brussels2022https: //ec. europa. eu/commission/presscorner/detail/en/ip₂2₂711Google Scholar Notably, differences in ethical values and interpretations of the law have already hindered data sharing across EU countries. 3Bak M. A. R. Ploem M. C. Tan H. L. Blom M. T. Willems D. L. Towards trust-based governance of health data research. Med Health Care Philos. 2023; 26: 185-200Crossref Scopus (3) Google Scholar The negotiations should have reassured citizens and all relevant stakeholders that the final regulation will warrant a robust and reliable system. Hence we wonder, have the conversations around consent mechanisms strengthened trust? We fear they have not. Take the suggestion to include an opt-in mechanism for genetic data: If particular datasets need special layers of protection, are other types of less-sensitive data not fully secured in the system? And how do we effectively set a threshold to the sensitiveness of health information that stands for 448M people? Sensitiveness is often based on the level of constraint to fully deidentify health data, 4Wan Z. Hazel J. W. Clayton E. W. Vorobeychik Y. Kantarcioglu M. Malin B. A. Sociotechnical safeguards for genomic data privacy. Nat Rev Genet. 2022; 23: 429-445Crossref Scopus (44) Google Scholar but as technology and precision medicine progress, more and more types of data will become laborious to anonymize (i. e. , medical imaging), 5Nakayama L. F. de Matos J. C. R. G. Stewart I. U. et al. Retinal scans and data sharing: the privacy and scientific development equilibrium. Mayo clinic proceedings. Digital Health. 2023; 1: 67-74Google Scholar, 6Chikwetu L. Miao Y. Woldetensae M. K. Bell D. Goldenholz D. M. Dunn J. Does deidentification of data from wearable devices give us a false sense of security? A systematic review. Lancet Digit Health. 2023; 5: e239-e247Summary Full Text Full Text PDF PubMed Scopus (0) Google Scholar so the EHDS should be rightfully equipped to withstand the challenge. To others sensitiveness is closely linked to stigma and risk of discrimination or victimization, 7Mental Health EuropeMental health in the digital age: applying a human rights based, psychosocial approach as compass. https: //www. mentalhealtheurope. org/library/mhe-releases-digitalisation-report/Date: 2022Google Scholar even in primary use. Therefore, an integrative and holistic solution is required, where additional measures tackle and mitigate the risks that accompany the implementation of such an ambitious and disruptive regulation. On the opposite side of the spectrum, closer to the initial position of the EC, multiple stakeholders worry that consent mechanisms add extra layers of complexity that introduce massive biases in the data collected, 8de Man Y. Wieland-Jorna Y. Torensma B. et al. Opt-In and Opt-Out Consent Procedures for the Reuse of Routinely Recorded Health Data in Scientific Research and Their Consequences for Consent Rate and Consent Bias: Systematic Review. J Med Internet Res. 2023; 25e42131Crossref Scopus (4) Google Scholar inevitably defeating the purpose of the system. For them, an opt-out (for the secondary use of data exclusively) already represents a compromise9European Respiratory SocietyThe European Health Data Space (EHDS) draft text sparks deep concerns across the European healthcare ecosystem. in: European Respiratory Society Website. European Respiratory Society. 2024https: //www. ersnet. org/news-and-features/news/the-european-health-data-space-ehds-draft-in-trilogues-sparks-deep-concerns-across-the-european-healthcare-ecosystem/Google Scholar; having 28 different consent mechanisms is not acceptable neither manageable. In response, the provisional agreement considers a few exceptions to opt-outs: Purposes of public interest and situations of vital interest. 2Council of the European UnionEuropean health data space: council and parliament strike deal. Council of the EU, 2024Google Scholar While there are valid insights in all the positions that diverse stakeholders have taken over the last two years, one thing is clear: Fear-based communication hampers trust in healthcare services, both in their current form and in the promised new landscape. If patients hesitate to seek for medical advice due to lack of reassurance in data protection, the system fails. As formulated by Bak et al. , trust bridges the privacy-solidarity debate3Bak M. A. R. Ploem M. C. Tan H. L. Blom M. T. Willems D. L. Towards trust-based governance of health data research. Med Health Care Philos. 2023; 26: 185-200Crossref Scopus (3) Google Scholar; and trust increases with clarity about who benefits from data access. 10Milne R. Morley K. I. Almarri M. A. et al. Demonstrating trustworthiness when collecting and sharing genomic data: public views across 22 countries. Genome Med. 2021; 13: 92Crossref Scopus (29) Google Scholar Transparency, security and equity should be at the bases of the design of the EHDS and at the core of the current conversations. Empowering citizens goes beyond enabling consent, it implies guaranteeing sufficient levels of digital health literacy and facilitating equitable access to healthcare and innovative treatments. The burden of responsibility should not be simply transferred from the institutions to patients. Neither should it fall on healthcare professionals. Adequate funding provisions are crucial to avoid fragmentation and warrant workability and transparency across all MS. JdFL and HTH worked together on the conceptualisation of the comment. JdFL took care of writing the original draft, and both JdFL and HTH contributed to reviewing and editing the manuscript. The contributors have no conflict of interest to declare.