Conditions for joining and remaining connected to MyHealth@EU, compliance checks and technical tests
Article 8
1. The Commission shall conduct compliance checks and facilitate technical tests to assess the compliance of the exchange of personal electronic health data between national contact points for digital health with the requirements catalogue referred to in Article 4(2) and the technical specifications referred to in Article 4(3). 2. A compliance check shall identify findings on security, confidentiality and protection of the exchange of personal electronic health data through MyHealth@EU. Findings shall be categorised as ‘minor’, ‘medium’ or ‘critical’ depending on the levels of compliance as defined in the compliance check framework referred to in Article 4(2), point (c). 3. A technical test shall assess the cross-border exchange of personal electronic health data between national contact points for digital health through MyHealth@EU and their conformance with the technical specifications referred to in Article 4(3). Findings shall be categorised as ‘minor’, ‘medium’ or ‘critical’ depending on the levels of compliance as defined in the test framework referred to in Article 4(2), point (c). 4. The Commission shall inform the national contact points for digital health of the results of the compliance checks and technical tests referred to in paragraph 1. This information shall contain, as a minimum, findings, observations and recommendations based on the results of the compliance checks and technical tests. 5. Where a compliance check or technical test has identified findings, regardless of their level, the national contact point for digital health concerned shall take measures to close findings after receiving information on the outcome of the compliance check or technical test from the Commission. An action plan containing measures to address the identified findings shall be submitted to the Commission within 15 working days of receipt of information on the findings. 6. After an action plan has been implemented, the national contact point for digital health shall notify the Commission. The Commission shall then assess the relevant evidence and decide to close any of the addressed findings. 7. The Commission shall regularly communicate open findings from compliance checks and technical tests to the steering group.