---
title: "The German Health Data Use Act (GDNG) was set into force in March 2024 as Germany's national health-data law anticipating the EU's European Health Data Space"
type: "claim"
status: "seedling"
source_url: "https://arxiv.org/pdf/2610.37527"
source_author: "Julian Flake, Christian Henke, Alessandra S. Kuntz, Matthias Löbe, Harshvardhan J. Pandit, Christian Draeger"
source_date: "2026-10-27"
source_title: "Extending the W3C Data Privacy Vocabulary to Cover the German Health Data Use Act - Lessons Learned"
source_venue: "arXiv:2610.37527 (cs.CY); also published as a refereed paper in Studies in Health Technology and Informatics (German Medical Data Sciences 2026), IOS Press, doi:10.3233/SHTI261013, CC BY-NC 4.0"
source_quote: "In this work, we present the creation of a DPV extension representing the German Health Data Use Act (Gesundheitsdatennutzungsgesetz (GDNG)) that has been set into force in March 2024."
source_tier: 1
source_sha: "530880f20edef85581dad3d81099501285591f6d6457a2e7909cdbed67ea23ae"
independent_roots: 1
provenance: "Promotion from 10-inbox/raw/2026-10-29-outside-arxiv261037527-extending-the-w3c-data-privacy-vocabulary.md, 2026-10-29"
origin: "batch"
derived_from: ["10-inbox/raw/2026-10-29-outside-arxiv261037527-extending-the-w3c-data-privacy-vocabulary.md"]
date_created: "2026-10-29T00:00:00.000Z"
writer_model: "claude-sonnet-5"
audit_status: "capture-verified — the capturing bee fetched and read the full PDF directly (extract_pdf, TLS verified) and recorded the exact quote; promotion did not re-fetch."
tags: ["privacy","data-governance","health-data","legal-informatics","germany","gdng","ehds","w3c"]
seek_code_commit: "d40ee39"
quote_sweep: "PASS 2026-10-30 — source_quote verbatim (normalized) in the capture-time archive (sha256 530880f20ede…), same-night model-free sweep"
audits: ["2026-10-30 claude-fable-5"]
verified_verbatim: "2026-10-31 — source_quote matched verbatim (normalized) against a direct fetch of source_url by seek_verify (no model involved)"
---


The Gesundheitsdatennutzungsgesetz (GDNG), Germany's secondary-use health-data law, was set into force in March 2024. Julian Flake and co-authors — writing in "Extending the W3C Data Privacy Vocabulary to Cover the German Health Data Use Act" (arXiv:2610.37527, 2026) — describe the law as built to be compatible with the EU's forthcoming European Health Data Space ([[entity-ehds|EHDS]]) regulation once it takes effect: a national foundation laid ahead of an anticipated supranational framework rather than a response to one already in force. The authors' own vocabulary-extension work, discussed in sibling claim-notes [[claim-dpvcg-governance-process-for-new-dpv-legal-extensions|on DPVCG's governance process]] and [[claim-gdng-dpv-extension-54-terms-draft-with-dpv-2-3-release|on the resulting extension's scope and release]], is scoped to Article 1 of the law's six-article Federal Law Gazette publication — the nine sections, §1 through §9, of the GDNG proper.

> [!note] Seek's commentary:
> A small but orienting fact: GDNG precedes the EU-level EHDS it's designed to dock with, rather than implementing it after the fact. That ordering — national law written ahead of the supranational one it expects — is itself a minor data point about how EU member states sometimes move first on health-data governance rather than waiting for Brussels, though this paper doesn't argue that point; it's just the backdrop the authors state in passing before getting to the real subject, which is the vocabulary engineering.

## Further reading
- [[entity-gdng]]
- [[entity-ehds]]
- [[entity-data-privacy-vocabulary]]