eHealth and COVID-19
The European Commission and the EU countries have defined a common approach for uniform and interoperable proofs of vaccination (vaccination certificates). The Commission and the EU members have also worked together for efficient contact tracing and warning apps.
Proof of vaccination
As vaccination efforts are progressing in EU countries, vaccinated people need to receive proofs of vaccination for medical purposes, also called vaccination certificates, that:
- are useful in healthcare situations, especially if a person uses services of different healthcare organisations, possibly in different countries
- follow a common and uniform template and are understood regardless of the country
- may be issued on paper or digitally
There are several situations in which vaccination certificates may be useful:
- if a person is vaccinated in different countries and needs to show the information about the previous vaccine to the second healthcare provider
- if a patient develops side effects and they need to be reported
- the person also gets a reliable record of vaccination useful for continuity of care
The European Commission and the EU countries have adopted guidelines on proof of vaccination for medical purposes. These guidelines aim to support interoperability of vaccination certificates and establish a minimum dataset, including a unique identifier.
Further work is being conducted by the eHealth Network in collaboration with EU agencies and other institutions and with the World Health Organization. The goal is to establish a trust framework and to develop better mechanisms for mutual recognition and interoperability of vaccination certificates.
- eHealth Network guidelines on proof of vaccination for medical purposes - basic interoperability elements
Contact tracing and warning apps
Mobile contact tracing and warning applications can help reduce the spread of the SARS-CoV-2 and support the gradual lifting of confinement measures by:
- informing citizens if they have been in proximity of persons infected by the virus (for more than 15 minutes within less than 2 meters) and
- encouraging citizens to inform their health authorities and ask for support
The European Commission and the EU countries have set up an EU-wide system to ensure interoperability – a so-called ‘gateway’.
This allows Europeans to:
- travel with one single app within the EU, and
- be warned if they may have been exposed to COVID-19 through prolonged proximity to or close contact with someone who is infected
Contact tracing apps are voluntarily installed by citizens and are based on Bluetooth proximity technology that does not enable tracking of people’s locations.
These apps alert people who have been in close proximity to an infected person for a certain duration, so that they can take necessary actions to protect themselves and the people around them, for example, by self-isolating and getting tested. In this way, the infection transmission can be rapidly interrupted.
Nevertheless, app users’ privacy and data must be safeguarded. The national authorities will deactivate the apps at the end of the pandemic, and users are free to uninstall it at any time.
How does the interoperability system work
Users will only need to install one app and will still be able to receive an alert, even if they travel abroad. The gateway server will efficiently receive and pass on random identifiers between national apps thereby keeping the amount of data exchanged to a minimum.
Going forward, more and more European countries will get the opportunity to join the gateway by linking their national contact tracing and warning apps to the system, and by doing so, exploiting the full potential of such apps to break the chain of coronavirus infections across borders and to save lives.
To support the joint controllers in complying with their obligations under Article 35 of the GDPR, the European Commission has prepared a document providing information on the European Federation Gateway Service that can be used by the Member States as a component of their respective own Data Protection Impact Assessment for the exchange of personal data via the gateway. In order to protect the security of the processing of personal data, the part of the document describing implemented security measures is not disclosed.
Toolbox and interoperability guidelines
EU countries, supported by the Commission, adopted an EU toolbox on 16 April 2020 to use mobile applications for privacy-preserving contact tracing and warning in response to the coronavirus pandemic. On 13 May 2020, the EU countries, with the support of the European Commission, adopted interoperability guidelines for approved contact tracing mobile applications in the EU and on 30 June 2020 a set of technical specifications.
A key principle of the guidelines is that users should be able to rely on a single app wherever they are in the EU. The interoperability gateway service links national contact tracing apps’ backend, which ensures that apps work seamlessly in different EU countries. The modalities for the processing in the gateway are defined in the Commission’s adopted Implementing Decision.
- Press release: Coronavirus - EU interoperability gateway goes live, first contact tracing and warning apps linked to the system
- How tracing and warning Apps can help during the pandemic
- Mobile contact tracing apps in EU Member States
- List of National Joint Controllers
- Press Release: EC starts testing interoperability gateway service for national contact tracing and warning apps
- Questions and Answers: a common approach for safe and efficient mobile tracing apps across the EU
- Guidance on data protection
- Common EU toolbox for Member States
- All guidance and technical documents produced by the eHealth Network