AWS for the European Health Data Space (EHDS)

Healthcare organizations face significant challenges, including fragmented systems, limited interoperability of health data, and the need to enable citizen control over personal health data. Additionally, there is a need to foster a thriving digital health market and unlock the potential of health data. To address these challenges, the EHDS aims to establish a common framework and infrastructure for the use of health data for research, innovation, policy-making, and regulatory activities in the European Union (EU). It will also create common standards and practices enabling EU citizens to better access, control, and share their electronic personal health data.

The European Health Data Space (EHDS) will empower around 449 million EU citizens and institutions to harness the transformative and ethical potential of health data. This could advance care, research, and understanding of diseases and treatments. However, realizing this vision requires thoughtful policy frameworks, combined with cutting-edge technologies, to ensure the security, transparency, and user control of sensitive health data.

AWS, with over 240 fully featured services, is well-positioned to support the development of the EHDS. With 114 Availability Zones within 36 geographic Regions (and more planned), AWS offers the infrastructure and capabilities needed to build secure, scalable, and compliant health data platforms.

AWS is committed to collaborating with customers to implement projects that will contribute to establishing a vibrant EHDS, one that sets global standards for the responsible use of sensitive data to improve people's lives.

To implement EHDS, healthcare organizations will need robust, scalable, and compliant technology solutions to build the underlying data platforms and meet EHDS requirements. AWS can provide much needed technical support.

Customers can work with AWS Healthcare Competency Partners to build innovative, cost-effective, and secure solutions that improve operational and clinical effectiveness, while improving patient outcomes for healthcare payers and providers. AWS Healthcare Competency Partners have demonstrated technical expertise and customer success in building healthcare solutions on AWS that securely store, process, transmit, and analyze clinical information.

Partners with the Security Competency have deep technical expertise with security in AWS and proven customer success in securing the cloud journey with their infrastructure, software and services offerings.

AWS Security Competency Partners specialize in delivering security-focused solutions for your specific workloads and use cases. AWS Partner solutions enable automation and agility and scaling with your workloads. You can easily find, buy, deploy, and manage these cloud-ready software solutions, including software-as-a-service (SaaS) products, in a matter of minutes from AWS Marketplace. These solutions work together to help secure your data in ways not possible on-premises, with solutions available for a wide range of workloads and use cases.

AWS helps healthcare and life sciences organizations store, transform, access, and analyze multiple healthcare data types to optimize drug discovery, disease prevention, diagnosis, and treatment.

AWS Health Data Portfolio aligns purpose-built AWS Services and AWS Partner solutions to the needs of the healthcare sector, ranging from secure data transfer, aggregation, and storage to data analytics, collaboration, sharing, and governance. With generative AI and purpose-built machine learning services, you can easily integrate cutting-edge technologies into your existing workflows to accelerate innovations and fuel new discoveries.

From research to the point-of-care, learn how generative AI can accelerate health innovations and improve patient experiences. The rapid growth of generative AI brings promising new innovation, and at the same time raises new challenges. At AWS we are committed to developing AI responsibly, taking a people-centric approach that prioritizes education, science, and our customers, to integrate responsible AI across the end-to-end AI lifecycle.

At AWS, security and privacy is the top priority.

Specifically for the healthcare industry, we provide a number of global certifications and accreditations (HIPAA, HITRUST, GDPR, and others) that allow you to store, process, or transmit your most sensitive data in the cloud and improve your security and compliance posture. Read more about healthcare compliance in the Cloud and dive deeper on the following topics:

• AWS compliance programs in Europe
• Hébergeur de Données de Santé (HDS) in France
• DiGAV compliance in Germany
• Cloud Computing Compliance Controls Catalog (C5)

With AWS, you can improve your ability to meet core security and European data privacy compliance requirements. We also provide guidance to assist you in maintaining compliance, and offer a large network of AWS partners who can help manage your compliance for you. Moreover, we support industry initiatives such as GAIA-X to define standards for the next generation of data infrastructure. Additionally, we support the Cloud Infrastructure Services Providers in Europe (CISPE) Code of Conduct with over 100 AWS services are certified compliant. We help you meet the requirements of European laws and standards, and to achieve the highest levels of security, privacy, and resilience.

European Sovereign Cloud

To offer you more choice for your data, we've announced plans to launch the AWS European Sovereign Cloud, a new, independent cloud for Europe, designed to help public sector organizations and customers in highly regulated industries meet their evolving sovereignty needs. The AWS European Sovereign Cloud will provide customers the capability to meet stringent operational autonomy and data residency requirements. The AWS European Sovereign Cloud is set to launch its first AWS Region in Germany by the end of 2025, available to all customers. Read more about digital sovereignty on AWS and how we are committed to helping our customers meet digital sovereignty requirements.