Severity: Low New document EU

EU introduces interoperable cross-border identification mechanism for health data exchange

Original title: Commission Implementing Regulation (EU) 2026/2099 of 21 September 2026 on an interoperable, cross-border identification and authentication mechanism for natural persons, health professionals and healthcare providers for the purposes of the cross-border exchange of personal electronic health data

Published
Source: eur-lex.europa.eu
Effective
Deadline
Not stated
Framework: EHDS
Regulation (EU) 2025/327 source
in 137 days
The Regulation applies in general; Member States must have notified their penalty rules (Article 99) source

Why it matters

The Commission Implementing Regulation (EU) 2026/2099 establishes technical requirements for an interoperable identification and authentication mechanism enabling cross-border health data exchange under the European Health Data Space (EHDS). The regulation enters into force on 12 October 2026, with phased implementation deadlines extending to 26 March 2029. Member States and healthcare organisations must implement mechanisms allowing natural persons, health professionals and healthcare providers to securely authenticate and access electronic health data across EU borders in compliance with EHDS requirements.

What changed

  • Implementation Regulation (EU) 2026/2099 establishes technical specifications and requirements for an interoperable identification and authentication mechanism for cross-border health data exchange, introducing harmonised standards across EU Member States
  • The mechanism enables natural persons, health professionals and healthcare providers to authenticate across borders using compatible systems for accessing and exchanging personal electronic health data
  • Entry into force occurs in phases: initial application on 12 October 2026, with subsequent compliance deadlines on 26 March 2027 and 26 March 2029 for full implementation across Member States

Who is affected

EU healthcare organisations, health professionals, healthcare providers, natural persons accessing health data, all EU Member States. Applies across the European Union under EHDS framework.

What to do

AI-assisted summary of the official document; the official text prevails. Not legal advice.