General conditions for the imposition of administrative fines by health data access bodies
Summary
Health data access bodies can fine health data holders/users up to EUR 10M/2% of turnover for basic secondary-use non-compliance, and up to EUR 20M/4% of turnover for serious infringements like prohibited-use processing, data extraction, or re-identification attempts.
secondary usepenaltiesfines
Read the full official text: https://eur-lex.europa.eu/eli/reg/2025/327/oj
Track EHDS article 64 as evidence
eurocompliant maps this obligation to a checklist task and the evidence that satisfies it, alongside every other framework you follow.
Start free trial