PogoWasRight.org

Menu
  • About
  • Privacy
Menu

New EU health data law endangers medical secrecy – EDRi

Posted on April 7, 2024April 7, 2024 by Dissent

EDRi writes:

After almost two years of legislative negotiations, lawmakers from the European Parliament and EU member states have agreed on a compromise for the new European Health Data Space (EHDS) last week.

Unfortunately, the EHDS compromise will expose everyone’s medical records to unnecessary security and privacy risks in the name of research and “innovation”. It mandates every hospital and every doctor to share the private medical data from every single patient—for the purpose of secondary use, i.e. unrelated to the patient’s treatment—with a national agency, the so-called health data access body. Exactly how and what patient data is going to be shared may vary from member state to member state.

Patient consent watered down

From the start, EDRi, many other organisations and over 112,000 people across Europe demanded a clear obligation to ask patients for their consent before this kind of health data sharing for secondary purposes takes place. While this has not found a majority, we successfully pushed EU parliamentarians to adopt at least a right for patients to opt out. Unfortunately, this opt-out right as a bare minimum level of protection has now been watered down with so many loopholes and exceptions by member states and the conservative lead negotiator, Tomislav Sokol, that the result can barely be called ‘opt-out right’ at all. As a result, even data from people who have opted out can now be shared for secondary use if requested by public authorities or other parties commissioned by public authorities.

Read more at EDRi.

h/t, Joe Cadillic

Category: HealthcareLawsNon-U.S.

Post navigation

← Keeping watch on Data Privacy: Thailand
EU’s Plan To Mass Surveil Private Chats Has Leaked →

Now more than ever

Search

Contact Me

Email: info@pogowasright.org

Mastodon: Infosec.Exchange/@PogoWasRight

Signal: +1 516-776-7756

Categories

Recent Posts

  • FTC dismisses privacy concerns in Google breakup
  • ARC sells airline ticket records to ICE and others
  • Clothing Retailer, Todd Snyder, Inc., Settles CPPA Allegations Regarding California Consumer Privacy Act Violations
  • US Customs and Border Protection Plans to Photograph Everyone Exiting the US by Car
  • Google agrees to pay Texas $1.4 billion data privacy settlement
  • The App Store Freedom Act Compromises User Privacy To Punish Big Tech
  • Florida bill requiring encryption backdoors for social media accounts has failed

RSS Recent Posts on DataBreaches.net

  • International cybercrime tackled: Amsterdam police and FBI dismantle proxy service Anyproxy
  • Moldovan Police Arrest Suspect in €4.5M Ransomware Attack on Dutch Research Agency
  • N.W.T.’s medical record system under the microscope after 2 reported cases of snooping
  • Department of Justice says Berkeley Research Group data breach may have exposed information on diocesan sex abuse survivors
  • Masimo Manufacturing Facilities Hit by Cyberattack
©2025 PogoWasRight.org. All rights reserved.
Menu
  • About
  • Privacy