This page is part of the EU Health Data API (v1.0.0-ballot: STU1 Ballot 1) based on FHIR (HL7® FHIR® Standard) R4. This is the current published version in its permanent home (it will always be available at this URL). For a full list of available versions, see the Directory of published versions

Use Case - Health Data Access Service

Overview

A Health Data Access Service enables a patient to access their own health data from Provider systems (Proxy Service as defined in EHDS Article 4).

Actors

• Health Data Access Service acts as Document Consumer and/or Resource Consumer
• EHR systems act as Document Access Provider and/or Resource Access Provider

Scope

This use case does not define complete requirements for the service itself; it defines how a service could use this interoperability model to access health data.

Workflow

1. Patient logs into the service (e.g., national eID)
2. Patient reviews and manages consent preferences
3. Service queries Provider systems for patient's data
4. Service displays documents and resources in patient-friendly format
5. Patient downloads or shares information as needed

Technical Flow

The service implements Consumer actors using system-to-system authorization:

• Patient authenticates to the Health Data Access Service (out of scope for this IG)
• Service authenticates to Provider systems using backend services credentials
• Service queries only for data belonging to the authenticated patient
• Patient consent preferences are enforced by the service and/or provider systems