{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,3,30]],"date-time":"2026-03-30T15:26:13Z","timestamp":1774884373707,"version":"3.50.1"},"reference-count":47,"publisher":"Frontiers Media SA","license":[{"start":{"date-parts":[[2025,6,19]],"date-time":"2025-06-19T00:00:00Z","timestamp":1750291200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":["frontiersin.org"],"crossmark-restriction":true},"short-container-title":["Front. Digit. Health"],"abstract":"<jats:p>The Regulation for European Health Data Space (EHDS) aims to address the fragmented health data landscape across Europe by promoting ethical and responsible reuse of data, seeking to balance the opportunities for data reuse with the risks it entails. However, the techno-legal aspects of navigating this balance remain poorly understood. This study adopts a qualitative and inductive approach, using semi-structured interviews to explore the risks, challenges, and gaps in the implementation of privacy-enhancing technologies (PETs) within EHDS, particularly in the context of its governance structure and data permits for secondary data use. The findings identify five distinct categories of concerns, based on fourteen risks, and highlight seven governance and technological solutions, illustrating how these solutions address multiple, often correlated risks. The interdependence between concerns and solutions emphasises the need for a strategic and integrated approach to both governance and technology. This mapping between the risks and solutions also highlights the central role of certain solutions, such as public engagement and awareness, in addressing multiple risks. Furthermore, it introduces a new dimension to the concerns by focusing on the structural imbalances in access to the health data economy. We conclude by proposing a research agenda to advance the integration of PETs into the EHDS framework, ensuring that data permits can effectively facilitate secure, ethical, and innovative health data use.<\/jats:p>","DOI":"10.3389\/fdgth.2025.1602101","type":"journal-article","created":{"date-parts":[[2025,6,19]],"date-time":"2025-06-19T05:32:07Z","timestamp":1750311127000},"update-policy":"https:\/\/doi.org\/10.3389\/crossmark-policy","source":"Crossref","is-referenced-by-count":16,"title":["Secondary use under the European Health Data Space: setting the scene and towards a research agenda on privacy-enhancing technologies"],"prefix":"10.3389","volume":"7","author":[{"given":"Sarah","family":"van Drumpt","sequence":"first","affiliation":[]},{"given":"Kartik","family":"Chawla","sequence":"additional","affiliation":[]},{"given":"Tom","family":"Barbereau","sequence":"additional","affiliation":[]},{"given":"Dayana","family":"Spagnuelo","sequence":"additional","affiliation":[]},{"given":"Linda","family":"van de Burgwal","sequence":"additional","affiliation":[]}],"member":"1965","published-online":{"date-parts":[[2025,6,19]]},"reference":[{"key":"B1","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1038\/s41591-024-03437-1","article-title":"Data sharing restrictions are hampering precision health in the European Union","volume":"31","author":"Legido-Quigley","year":"2025","journal-title":"Nat Med"},{"key":"B2","doi-asserted-by":"publisher","first-page":"101150","DOI":"10.1016\/j.lanepe.2024.101150","article-title":"Health, the missing chapter in the Draghi Report on Europe\u2019s future","volume":"48","author":"McKee","year":"2025","journal-title":"Lancet Reg Health Europe"},{"key":"B3","article-title":"Proposal for a regulation of the European parliament and of the council on the European health data space. EUR-Lex COM\/2022\/197 (2022)","year":""},{"key":"B4","article-title":"Regulation (EU) 2016\/679 of the European parliament and of the council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing directive 95\/46\/EC (general data protection regulation)","year":"2016","journal-title":"Off J Eur Union"},{"key":"B5","doi-asserted-by":"publisher","first-page":"104861","DOI":"10.1016\/j.healthpol.2023.104861","article-title":"The European health data space: too big to succeed?","volume":"135","author":"Marelli","year":"2023","journal-title":"Health Policy (New York)"},{"key":"B6","article-title":"Cybersecurity risks and threats in healthcare. In: Artificial Intelligence-Enabled Security for Healthcare Systems: Safeguarding Patient Data and Improving Services. Cham, Switzerland: Springer (2025). p. 39\u201364","author":"Gupta","year":""},{"key":"B7","article-title":"The ethics of big data: current and foreseeable issues in biomedical contexts. In: The Ethics of Biomedical Big Data. Cham, Switzerland: Springer (2016). p. 445\u201380","author":"Mittelstadt","year":""},{"key":"B8","doi-asserted-by":"publisher","first-page":"105993","DOI":"10.1016\/j.clsr.2024.105993","article-title":"Will the GDPR restrain health data access bodies under the European Health Data Space (EHDS)?","volume":"54","author":"Quinn","year":"2024","journal-title":"Comput Law Secur Rev"},{"key":"B9","doi-asserted-by":"publisher","first-page":"1357","DOI":"10.1126\/science.abn4874","article-title":"Will the European Health Data Space change data sharing rules?","volume":"375","author":"Shabani","year":"2022","journal-title":"Science"},{"key":"B10","doi-asserted-by":"publisher","first-page":"498","DOI":"10.1038\/s41431-024-01543-9","article-title":"Ethical and social reflections on the proposed European Health Data Space","volume":"32","author":"Staunton","year":"2024","journal-title":"Eur J Hum Genet"},{"key":"B11","doi-asserted-by":"publisher","first-page":"110560","DOI":"10.1016\/j.dib.2024.110560","article-title":"Evaluation and utilisation of privacy enhancing technologies\u2014a data spaces perspective","volume":"55","author":"Au\u00f1\u00f3n","year":"2024","journal-title":"Data Brief"},{"key":"B12","article-title":"EU-wide collaboration needed to optimise health data use for research and innovation - Tehdas. TEHDAS Consortium Partners (2023)","author":"Kalliola","year":""},{"key":"B13","article-title":"European data spaces (2025) (Accessed March 28, 2025)","year":""},{"key":"B14","article-title":"Communication from the commission to the European parliament, the council, the European economic and social committee and the committee of the regions: a European strategy for data. EUR-Lex COM\/2020\/66 (2020)","year":""},{"key":"B15","article-title":"Secure computation and trustless data intermediaries in data spaces (2024)","author":"Fabianek","year":""},{"key":"B16","doi-asserted-by":"publisher","first-page":"709","DOI":"10.1007\/s12553-024-00850-x","article-title":"Digital transitions in healthcare: the need for transdisciplinary research to overcome barriers of privacy enhancing technologies uptake","volume":"14","author":"van Drumpt","year":"2024","journal-title":"Health Technol (Berl)"},{"key":"B17","article-title":"Privacy-enhancing technologies (PETs) (2024) (Accessed May 13, 2025)","year":""},{"key":"B18","doi-asserted-by":"publisher","first-page":"110424","DOI":"10.1016\/j.patcog.2024.110424","article-title":"Federated learning for medical image analysis: a survey","volume":"151","author":"Guan","year":"2024","journal-title":"Pattern Recognit"},{"key":"B19","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1038\/s41746-020-00323-1","article-title":"The future of digital health with federated learning","volume":"3","author":"Rieke","year":"2020","journal-title":"npj Digit Med"},{"key":"B20","doi-asserted-by":"publisher","first-page":"11608","DOI":"10.1073\/pnas.1918257117","article-title":"Secure large-scale genome-wide association studies using homomorphic encryption","volume":"117","author":"Blatt","year":"2020","journal-title":"Proc Natl Acad Sci"},{"key":"B21","doi-asserted-by":"publisher","first-page":"887","DOI":"10.1093\/bib\/bbx139","article-title":"Privacy-preserving techniques of genomic data-a survey","volume":"20","author":"Al Aziz","year":"2019","journal-title":"Brief Bioinform"},{"key":"B22","first-page":"7952236","article-title":"Privacy-preserving machine learning in healthcare: a survey","volume":"11","author":"Chaudhry","year":"2020","journal-title":"PMC"},{"key":"B23","first-page":"8516535","article-title":"Privacy protection techniques for health data sharing: a comprehensive survey","volume":"10","author":"Liu","year":"2021","journal-title":"PMC"},{"key":"B24","article-title":"Whitepaper on the benefits of Privacy Enhancing Technologies (PETs). Tech. rep., Centre of Excellence for Data Sharing & Cloud (2023)","year":""},{"key":"B25","doi-asserted-by":"publisher","first-page":"101385","DOI":"10.1016\/j.giq.2019.06.002","article-title":"Defining digital transformation: results from expert interviews","volume":"36","author":"Mergel","year":"2019","journal-title":"Gov Inf Q"},{"key":"B26","volume-title":"Basics of Qualitative Research: Techniques and Procedures for Developing Grounded Theory","author":"Corbin","year":"2014"},{"key":"B27","volume-title":"Qualitative Content Analysis: Theoretical Foundation, Basic Procedures and Software Solution","author":"Mayring","year":"2014"},{"key":"B28","volume-title":"Qualitative Interviewing: The Art of Hearing Data","author":"Rubin","year":"2012"},{"key":"B29","doi-asserted-by":"publisher","first-page":"2","DOI":"10.1016\/j.infoandorg.2006.11.001","article-title":"The qualitative interview in IS research: examining the craft","volume":"17","author":"Myers","year":"2007","journal-title":"Inf Org"},{"key":"B30","doi-asserted-by":"publisher","first-page":"67","DOI":"10.2307\/2494100","article-title":"A set of principles for conducting and evaluating interpretive field studies in information systems","volume":"23","author":"Klein","year":"1999","journal-title":"MIS Q"},{"key":"B31","doi-asserted-by":"publisher","first-page":"105780","DOI":"10.1016\/j.ijmedinf.2024.105780","article-title":"Towards secure and trusted AI in healthcare: a systematic review of emerging innovations and ethical challenges","volume":"195","author":"Mohsin Khan","year":"2025","journal-title":"Int J Med Inform"},{"key":"B32","doi-asserted-by":"publisher","first-page":"3291","DOI":"10.2147\/RMHP.S450082","article-title":"Paradigm transformation of global health data regulation: challenges in governance and human rights protection of cross-border data flows","volume":"17","author":"Xia","year":"2024","journal-title":"Risk Manag Healthc Policy"},{"key":"B33","doi-asserted-by":"publisher","first-page":"185","DOI":"10.1007\/s11019-022-10134-8","article-title":"Towards trust-based governance of health data research","volume":"26","author":"Bak","year":"2023","journal-title":"Med Health Care Philos"},{"key":"B34","doi-asserted-by":"publisher","first-page":"827253","DOI":"10.3389\/fmed.2022.827253","article-title":"Transformed health ecosystems\u2014challenges for security, privacy, and trust","volume":"9","author":"Ruotsalainen","year":"2022","journal-title":"Front Med (Lausanne)"},{"key":"B35","doi-asserted-by":"publisher","first-page":"184","DOI":"10.1055\/s-0043-1762285","article-title":"Health information exchange: understanding the policy landscape and future of data interoperability","volume":"32","author":"Holmgren","year":"2023","journal-title":"Yearb Med Inform"},{"key":"B36","doi-asserted-by":"publisher","first-page":"e50421","DOI":"10.2196\/50421","article-title":"Patient and public willingness to share personal health data for third-party or secondary uses: systematic review","volume":"26","author":"Baines","year":"2024","journal-title":"J Med Internet Res"},{"key":"B37","doi-asserted-by":"publisher","first-page":"e840","DOI":"10.1016\/S2589-7500(23)00156-5","article-title":"Federated electronic health records for the European Health Data Space","volume":"5","author":"Raab","year":"2023","journal-title":"Lancet Digit Health"},{"key":"B38","doi-asserted-by":"publisher","first-page":"323","DOI":"10.1136\/medethics-2020-107020","article-title":"What can data trusts for health research learn from participatory governance in biobanks?","volume":"48","author":"Milne","year":"2022","journal-title":"J Med Ethics"},{"key":"B39","doi-asserted-by":"publisher","first-page":"13","DOI":"10.1007\/s44206-022-00016-0","article-title":"Achieving a data-driven risk assessment methodology for ethical AI","volume":"1","author":"Fell\u00e4nder","year":"2022","journal-title":"Digit Soc"},{"key":"B40","doi-asserted-by":"publisher","first-page":"1396","DOI":"10.3390\/app11041396","article-title":"Towards a collection of security and privacy patterns","volume":"11","author":"Papoutsakis","year":"2021","journal-title":"Appl Sci"},{"key":"B41","article-title":"Legal design patterns: towards a new language for legal information design. In: E. Schweighofer, F. Kummer, A. Saarenp\u00e4\u00e4, editors. Internet of Things. Proceedings of the 22nd International Legal Informatics Symposium IRIS 2019. Bern: Editions Weblaw (2019). p. 517\u201326","author":"Rossi","year":""},{"key":"B42","doi-asserted-by":"publisher","first-page":"105772","DOI":"10.1016\/j.clsr.2022.105772","article-title":"Representing legislative rules as code: reducing the problems of \u2018scaling up\u2019","volume":"48","author":"Mowbray","year":"2023","journal-title":"Comput Law Secur Rev"},{"key":"B43","article-title":"Lazy influence approximation for data valuation in federated learning. arXiv [Preprint]. arXiv:2205.11518 (2022)","author":"Rokvic","year":""},{"key":"B44","article-title":"Training verifiers to solve math word problems. arXiv [Preprint]. arXiv:2210.08674 (2022)","author":"Cobbe","year":""},{"key":"B45","doi-asserted-by":"publisher","first-page":"8439","DOI":"10.1109\/ACCESS.2024.3509457","article-title":"A secure framework for privacy-preserving analytics in healthcare records using zero-knowledge proofs and blockchain in multi-tenant cloud environments","volume":"13","author":"Babu","year":"2024","journal-title":"IEEE Access"},{"key":"B46","doi-asserted-by":"publisher","first-page":"320","DOI":"10.1057\/palgrave.ejis.3000589","article-title":"Doing interpretive research","volume":"16","author":"Walsham","year":"2006","journal-title":"Eur J Inf Syst"},{"key":"B47","article-title":"Country comparison: further use of health data for research, innovation and policy (2023)","year":""}],"container-title":["Frontiers in Digital Health"],"original-title":[],"link":[{"URL":"https:\/\/www.frontiersin.org\/articles\/10.3389\/fdgth.2025.1602101\/full","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,19]],"date-time":"2025-06-19T05:32:09Z","timestamp":1750311129000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.frontiersin.org\/articles\/10.3389\/fdgth.2025.1602101\/full"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,6,19]]},"references-count":47,"alternative-id":["10.3389\/fdgth.2025.1602101"],"URL":"https:\/\/doi.org\/10.3389\/fdgth.2025.1602101","relation":{},"ISSN":["2673-253X"],"issn-type":[{"value":"2673-253X","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,6,19]]},"article-number":"1602101"}}