Articles 61 and 54: users process data only under a data permit, approved request or HealthData@EU access approval and only for its purposes; they do not give data to third parties not named in the permit, never re-identify or attempt to re-identify persons, publish anonymous results within 18 months of finishing processing (extendable), inform the body and acknowledge the EHDS, report significant health findings about individuals, and cooperate. Prohibited uses include decisions detrimental to persons, decisions on jobs, insurance, credit or terms of goods and services that discriminate, advertising or marketing, developing harmful products such as illicit drugs, alcohol, tobacco, weapons or addictive products, and activities contrary to national ethics rules.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.