EU Health Data API, published by HL7 Europe. This guide is not an authorized publication; it is the continuous build for version 0.1.0 built by the FHIR (HL7® FHIR® Standard) CI Build. This version is based on the current content of https://github.com/euridice-org/eu-health-data-api/ and changes regularly. See the Directory of published versions

Use Case - Health Data Access Service

Overview

A Health Data Access Service enables a patient to access their own health data from Provider systems (Proxy Service as defined in EHDS Article 4).

Actors

• Health Data Access Service acts as Document Consumer and/or Resource Consumer
• EHR systems act as Document Access Provider and/or Resource Access Provider

Scope

This use case does not define complete requirements for the service itself; it defines how a service could use this interoperability model to access health data.

Workflow

1. Patient logs into the service (e.g., national eID)
2. Patient reviews and manages consent preferences
3. Service queries Provider systems for patient's data
4. Service displays documents and resources in patient-friendly format
5. Patient downloads or shares information as needed

Technical Flow

The service implements Consumer actors using system-to-system authorization:

• Patient authenticates to the Health Data Access Service (out of scope for this IG)
• Service authenticates to Provider systems using backend services credentials
• Service queries only for data belonging to the authenticated patient
• Patient consent preferences are enforced by the service and/or provider systems