Commission Implementing Regulation (EU) 2026/2099 establishes cross-border health data authentication mechanism

Original title: Official Journal, L series — daily edition

Commission Implementing Regulation (EU) 2026/2099 has been published on 21 September 2026, establishing an interoperable cross-border identification and authentication mechanism for natural persons, health professionals and healthcare providers. This regulation enables secure cross-border exchange of personal electronic health data across EU member states through a standardized authentication framework. Healthcare organisations and digital health platforms operating across borders will need to implement this authentication mechanism to facilitate patient data mobility and interoperability in healthcare services.

What changed

• Commission Implementing Regulation (EU) 2026/2099 of 21 September 2026 replaces the previously referenced Commission Delegated Regulation (EU) 2026/1560 of 3 July 2026 on sustainability reporting standards, introducing new requirements for cross-border health data authentication instead of sustainability reporting requirements.

Who is affected

Healthcare providers, health professionals, natural persons exchanging health data across EU borders, digital health platforms and healthcare organisations operating in multiple EU member states

Summary generated by a language model; the official text prevails. Not legal advice.