EHDS, Article 73, DE
1. Health data access bodies shall provide access to electronic health data pursuant to a data permit only through a secure processing environment which is subject to technical and organisational measures and security and interoperability requirements. In particular, the secure processing environment shall comply with the following security measures:
(a)
the restriction of access to the secure processing environment to authorised natural persons listed in the data permit issued pursuant to Article 68;
(b)
the minimisation of the risk of the unauthorised reading, copying, modification or removal of electronic health data hosted in the secure processing environment through state-of-the-art technical and organisational measures;
(c)
the limitation of the input of electronic health data and the inspection, modification or deletion of electronic health data hosted in the secure processing environment to a limited number of authorised identifiable individuals;
(d)
ensuring that health data users have access only to the electronic health data covered by their data permit, by means of individual and unique user identities and confidential access modes only;
(e)
the keeping of identifiable logs of access to and activities in the secure processing environment for the period necessary to verify and audit all processing operations in that environment; logs of access shall be kept for at least one year;
(f)
ensuring compliance and monitoring the security measures referred to in this paragraph to mitigate potential security threats.
2. Health data access bodies shall ensure that electronic health data from health data holders in the format specified in the data permit can be uploaded by those health data holders and can be accessed by the health data user in a secure processing environment.
Version: 350a524a4a939964
SHA-256: sha256:350a524a4a939964484bc6170552d96b4b525961b9b087a8210fe75b3acea77c
- Article 1
- Article 2
- Article 3
- Article 4
- Article 5
- Article 6
- Article 7
- Article 8
- Article 9
- Article 10
- Article 11
- Article 12
- Article 13
- Article 14
- Article 15
- Article 16
- Article 17
- Article 18
- Article 19
- Article 20
- Article 21
- Article 22
- Article 23
- Article 24
- Article 25
- Article 26
- Article 27
- Article 28
- Article 29
- Article 30
- Article 31
- Article 32
- Article 33
- Article 34
- Article 35
- Article 36
- Article 37
- Article 38
- Article 39
- Article 40
- Article 41
- Article 42
- Article 43
- Article 44
- Article 45
- Article 46
- Article 47
- Article 48
- Article 49
- Article 50
- Article 51
- Article 52
- Article 53
- Article 54
- Article 55
- Article 56
- Article 57
- Article 58
- Article 59
- Article 60
- Article 61
- Article 62
- Article 63
- Article 64
- Article 65
- Article 66
- Article 67
- Article 68
- Article 69
- Article 70
- Article 71
- Article 72
- Article 74
- Article 75
- Article 76
- Article 77
- Article 78
- Article 79
- Article 80
- Article 81
- Article 82
- Article 83
- Article 84
- Article 85
- Article 86
- Article 87
- Article 88
- Article 89
- Article 90
- Article 91
- Article 92
- Article 93
- Article 94
- Article 95
- Article 96
- Article 97
- Article 98
- Article 99
- Article 100
- Article 101
- Article 102
- Article 103
- Article 104
- Article 105
Source: NovaCopilot