Identification, authentication and authorisation of health professionals and healthcare providers for the cross-border exchange of personal electronic health data
Article 6
1. Each Member State shall list the entity or entities responsible for identifying, authenticating and authorising the health professional or healthcare provider requesting the cross-border exchange of personal electronic health data. 2. Before requesting the cross-border exchange of personal electronic health data through MyHealth@EU, the entity or entities referred to in paragraph 1 shall identify, authenticate and authorise the health professional or healthcare provider requesting that exchange. 3. The entity or entities referred to in paragraph 1 shall identify and authenticate the health professional using electronic authentication means that provides at least the assurance level substantial referred to in Article 8(2), point (b), of Regulation (EU) No 910/2014. From 26 March 2032, the electronic authentication means of health professionals shall provide the assurance level high referred to in Article 8(2), point (c), of that Regulation. The electronic identification means shall be notified at the required assurance level to the Commission pursuant to Regulation (EU) No 910/2014, or its assurance level shall be confirmed by a conformity assessment body referred to in Article 2, point (13), of Regulation (EC) No 765/2008 or an equivalent body.