This is a session presenting basic recommendations intended to facilitate the planning (and implementation) of national legislation on secondary use of health data. These recommendations are based on a summary on a multinational level of the experiences and conclusions of pioneering European countries that already have such national legislation, in combination with the needs of other European countries in this respect.

GDPR is of specific importance when considering data exchange for secondary purposes. Six EU countries were interviewed about best practices and lessons learned in the context of preparing and implementing national legislation, specifically regarding certain legal provisions in the context of national structure and processes in relation to secondary use of health data.

This presentation brings forward nine recommendations for Member States. These are legal interoperability, common interpretation of anonymisation and pseudonymisation, regulating secondary use, harmonising legislation, choosing a suitable legal basis, understanding controller and processor relationships, importance of addressing security from start and having a good communication with the public as well as ensuring enough resources for implementation.