12. By 26 March 2027, the Commission shall, by means of implementing acts, set out:
|
(a)
|
requirements, technical specifications and the IT architecture of HealthData@EU, which shall ensure state-of-the-art data security, confidentiality, and protection of electronic health data in HealthData@EU;
|
|
(b)
|
conditions and compliance checks required to be able to join and remain connected to HealthData@EU and conditions for temporary disconnection or definitive exclusion from HealthData@EU, including specific provisions for cases of serious misconduct or repeated infringements;
|
|
(c)
|
the minimum criteria that need to be met by the national contact points for secondary use and the authorised participants in HealthData@EU;
|
|
(d)
|
the responsibilities of the controllers and processors participating in HealthData@EU;
|
|
(e)
|
the responsibilities of the controllers and processors for the secure processing environment managed by the Commission;
|
|
(f)
|
common specifications for the architecture of HealthData@EU and for its interoperability with other common European data spaces.
|
The implementing acts referred to in the first subparagraph of this paragraph shall be adopted in accordance with the examination procedure referred to in Article 98(2).