European Health Data Space Regulation, High-Risk AI Systems Claiming Interoperability with EHR Systems (Article 27(2))
Regulation (EU) 2025/327, Article 27(2)
An AI sector rules rule binding public and private bodies.
As of .
What it requires
- This duty takes effect on for the priority categories of personal electronic health data in Article 14(1), points (a), (b) and (c), and for EHR systems intended by the manufacturer to process them, and on for the categories in points (d), (e) and (f) (Article 105).
- If you are a provider of an AI system considered high-risk under Article 6 of Regulation (EU) 2024/1689, outside the scope of Regulation (EU) 2017/745 or (EU) 2017/746, and you claim interoperability of the system with the harmonised software components of EHR systems, prove compliance with the essential requirements on the European interoperability software component and the European logging software component in Section 2 of Annex II (Article 27(2)).
What this law does
Article 27(2) requires providers of AI systems considered high-risk under Article 6 of Regulation (EU) 2024/1689, that do not fall within the scope of Regulation (EU) 2017/745 or (EU) 2017/746 and that claim interoperability with the harmonised software components of EHR systems, to prove compliance with the essential requirements on the European interoperability software component and the European logging software component laid down in Section 2 of Annex II.
Article 27(2) applies Article 36 of the Regulation to those high-risk AI systems. Under Article 36(4), high-risk AI systems referred to in Article 27 that are in conformity with the common specifications adopted under Article 36(1) are considered to be in conformity with the essential requirements in Annex II that those specifications cover.
Article 105 applies Article 27, with Articles 3 to 15, 23(2) to (6), 25, 26, 47, 48 and 49, from to the priority categories of personal electronic health data in Article 14(1), points (a), (b) and (c), and to EHR systems intended by the manufacturer to process them, and from to the categories in points (d), (e) and (f).
When LexLint raises it
When your app profile says your app makes high-risk automated decisions or handles health records.