eHealth and COVID-19
The European Commission and the EU countries have defined a common approach for uniform and interoperable proofs of vaccination (vaccination certificates). The Commission and the EU members have also worked together for efficient contact tracing and warning apps.
Digital Green Certificate
A Digital Green Certificate is a digital proof that a person has been vaccinated against COVID-19, has recovered from COVID-19 or has a test result. The Digital Green Certificate is therefore a name used to collectively refer to 3 types of certificates: vaccination, recovery, test.
As vaccination efforts are progressing in EU countries, vaccinated people need to receive proofs of vaccination, also called vaccination certificates, that are useful in healthcare situations, especially if a person uses services of different healthcare organisations, possibly in different countries.
In addition, they are useful for travel purposes in some EU countries that have established specific travel rules for vaccinated people. The European Commission and the EU countries have adopted guidelines on verifiable vaccination certificates. These guidelines aim to support interoperability of vaccination certificates and establish a minimum dataset, including a unique identifier.
Some Member States have established specific travel rules for people that have recently recovered from the COVID-19 disease. Instead of a test or vaccination certificate, such persons can be requested to present a recovery certificate.
In order to support interoperability and acceptance of recovery certificates issued by different EU countries, the eHealth Network has published guidelines on COVID-19 citizen recovery certificates, establishing a minimum data set for them.
Certificates for test results
Concerning certificates documenting test results, the Health Security Committee has adopted a common standardised set of data to be included in COVID-19 test result certificates. Test results are commonly requested by EU members as part of their free movement related arrangements, in order to prevent further spread of the virus and its variants.
Trust framework and detailed technical specifications
The eHealth Network has published an outline of the trust framework needed for stablishing the Digital Green Certificate infrastructure, and prepared detailed technical specifications describing mechanisms for the mutual recognition and interoperability of vaccination, test and recovery certificates (formats and trust management, gateway, 2D barcode, applications). In addition, detailed technical structure and value sets to be used in the contents of the Digital Green Certificates are available. Reference implementations are being developed and will be published as open source.
Work has been conducted by the eHealth Network in collaboration with EU agencies, the Health Security Committee, the World Health Organization and other institutions. Further collaboration aiming at the deployment of the Digital Green Certificate system is ongoing with Member States, third countries, and international organisations.
- Datasets and value sets:
- Value sets and JSON Schema for Digital Green Certificates
- eHealth Network guidelines on verifiable vaccination certificates - basic interoperability elements
- Guidelines on COVID-19 citizen recovery interoperable certificates - minimum dataset
- A common standardised set of data to be included in COVID-19 test result certificates (adopted by the Health Security Committee)
- Interoperability of health certificates - Trust framework
- Detailed technical specifications for Digital Green Certificates:
- Open source reference implementations (ongoing work)
Contact tracing and warning apps
Mobile contact tracing and warning applications can help reduce the spread of the SARS-CoV-2 and support the gradual lifting of confinement measures by:
- informing citizens if they have been in proximity of persons infected by the virus (for more than 15 minutes within less than 2 meters) and
- encouraging citizens to inform their health authorities and ask for support
The European Commission and the EU countries have set up an EU-wide system to ensure interoperability – a so-called ‘gateway’.
This allows Europeans to:
- travel with one single app within the EU, and
- be warned if they may have been exposed to COVID-19 through prolonged proximity to or close contact with someone who is infected
Contact tracing apps are voluntarily installed by citizens and are based on Bluetooth proximity technology that does not enable tracking of people’s locations.
These apps alert people who have been in close proximity to an infected person for a certain duration, so that they can take necessary actions to protect themselves and the people around them, for example, by self-isolating and getting tested. In this way, the infection transmission can be rapidly interrupted.
Nevertheless, app users’ privacy and data must be safeguarded. The national authorities will deactivate the apps at the end of the pandemic, and users are free to uninstall it at any time.
How does the interoperability system work
Users will only need to install one app and will still be able to receive an alert, even if they travel abroad. The gateway server will efficiently receive and pass on random identifiers between national apps thereby keeping the amount of data exchanged to a minimum.
Going forward, more and more European countries will get the opportunity to join the gateway by linking their national contact tracing and warning apps to the system, and by doing so, exploiting the full potential of such apps to break the chain of coronavirus infections across borders and to save lives.
To support the joint controllers in complying with their obligations under Article 35 of the GDPR, the European Commission has prepared a document providing information on the European Federation Gateway Service that can be used by the Member States as a component of their respective own Data Protection Impact Assessment for the exchange of personal data via the gateway. In order to protect the security of the processing of personal data, the part of the document describing implemented security measures is not disclosed.
Toolbox and interoperability guidelines
EU countries, supported by the Commission, adopted an EU toolbox on 16 April 2020 to use mobile applications for privacy-preserving contact tracing and warning in response to the coronavirus pandemic. On 13 May 2020, the EU countries, with the support of the European Commission, adopted interoperability guidelines for approved contact tracing mobile applications in the EU and on 30 June 2020 a set of technical specifications.
A key principle of the guidelines is that users should be able to rely on a single app wherever they are in the EU. The interoperability gateway service links national contact tracing apps’ backend, which ensures that apps work seamlessly in different EU countries. The modalities for the processing in the gateway are defined in the Commission’s adopted Implementing Decision.
- Press release: Coronavirus - EU interoperability gateway goes live, first contact tracing and warning apps linked to the system
- How tracing and warning Apps can help during the pandemic
- Mobile contact tracing apps in EU Member States
- List of National Joint Controllers
- Press Release: EC starts testing interoperability gateway service for national contact tracing and warning apps
- Questions and Answers: a common approach for safe and efficient mobile tracing apps across the EU
- Guidance on data protection
- Common EU toolbox for Member States
- All guidance and technical documents produced by the eHealth Network