National systems

National electronic health records in Europe and the US: who runs them, which standards they use, how to connect

A country-by-country map of national health record infrastructures: Germany's ePA, France's Mon espace santé, Italy's FSE, Spain's HCDSNS, the Dutch MedMij and LSP, the NHS in England, Austria's ELGA, Poland's P1, the Nordics and the US networks. Who runs each, patient access, standards, vendor entry points, and the EHDS.

by Published 7 min read

Short answer: almost every European country now runs a national health record infrastructure, but no two look alike. Some are central records (Austria's ELGA, Poland's P1, France's Mon espace santé); some are federations of regional records with a national index (Italy's FSE, Spain's HCDSNS); some are exchange networks without a central record (the Netherlands' LSP and MedMij, Germany's Telematikinfrastruktur with the insurer-hosted ePA); England has a national backbone (Spine) with regional shared records; the United States has no national record but a network-of-networks (TEFCA) and a federal data standard (USCDI). Most started on CDA documents and IHE profiles and are adding FHIR APIs; the EHDS will require all EU systems to exchange the same priority data in the European EHR exchange format through MyHealth@EU.

The map

Europe's national electronic health record systems fall into a few recognisable shapes: Germany, France, Austria, Poland and the Nordic countries run central or insurer-hosted records, Italy and Spain federate regional records through a national node, the Netherlands relies on exchange networks, England on the NHS Spine backbone, and the United States on networks of networks under TEFCA.

Country System Model Patient access Standards Vendor entry point
Germany ePA (elektronische Patientenakte), Telematikinfrastruktur Insurer-hosted record, opt-out since 2025 Insurer app with GesundheitsID FHIR (MIOs, ePA 3.0 API), CDA (eArztbrief), IHE gematik specifications; TI access via connector or TI gateway
France Mon espace santé (with the DMP), MSSanté Central record, opt-out monespacesante.fr and app CDA (CI-SIS), IHE XDS, FHIR profiles, INS identity ANS; Ségur referencing; HDS hosting
Italy FSE 2.0 (Fascicolo Sanitario Elettronico) Regional records with national interoperability (INI, EDS) Regional portals and the national FSE access with SPID/CIE CDA R2, moving to FHIR via the FSE 2.0 gateway Ministry of Health / AgID specifications; regional onboarding
Spain HCDSNS (Historia Clínica Digital del SNS) 17 regional records linked through a national node Regional portals and apps with Cl@ve CDA-based summaries and reports; e-prescription interoperability Regional health services; Ministry node for cross-region
Netherlands MedMij (personal health environments) and LSP (exchange point) Exchange networks, no central record PGO apps certified under MedMij FHIR (MedMij standards, nl-core), HL7 v3 on LSP MedMij certification; Nictiz standards; VZVZ for LSP
England NHS Spine, GP Connect, NHS App, Shared Care Records National backbone plus regional records NHS App with NHS login FHIR UK Core, SNOMED CT, dm+d, HL7 v3 on older Spine services NHS England API catalogue; DTAC; DSPT
Austria ELGA Central document-based record, opt-out gesundheit.gv.at with ID Austria CDA (ELGA guides), IHE XDS; FHIR for e-Impfpass ELGA GmbH; connection via a GDA's software
Poland P1 platform, IKP (patient account) Central index and services (e-recepta, e-skierowanie) IKP portal and mojeIKP app HL7 CDA (PIK), FHIR for medical events CeZ (Centrum e-Zdrowia) integration
Denmark, Finland, Estonia, Sweden sundhed.dk, Kanta, Estonian Health Information System, 1177 Central national records, long established National portals with eID CDA, HL7 v3, FHIR increasingly National agencies
United States No national record; TEFCA networks, HIEs Network of networks Provider portals, IAS apps C-CDA, FHIR US Core, USCDI QHINs, Carequality, CommonWell

Country pages: Germany, France, Italy, Spain, Netherlands, United Kingdom, Austria, Poland, and the cross-border layer, MyHealth@EU. For the US, see TEFCA and USCDI.

Four models

National health record infrastructures in Europe and the United States follow four models: a central record that every provider writes to, federated regional records joined by a national index, an exchange network with no central store, and a network of networks under a common agreement. Each model shapes how patients see their data and how vendors connect.

Central record. One national store, usually document-based, that every provider writes to and the patient sees in one portal (Austria, Poland, France, the Nordics, Estonia). Simple for patients; the vendor connects once, to one specification; the price is a large central system and a long specification cycle.

Federated regions with a national index. Regions keep their own records; a national layer finds and fetches across them (Italy, Spain). Reflects decentralised health systems; the vendor onboards per region, with national rules for the cross-region part.

Exchange network. No central record; a national switch or a trust framework lets authorised systems query each other and lets patients collect their data in an app of their choice (Netherlands; Germany's TI with the ePA hosted by insurers). Privacy-friendly and vendor-neutral; the hard part is making every system actually answer.

Network of networks. Private networks connect to each other under a common agreement, with a federal data standard but no federal record (United States). Flexible, uneven coverage, strong on documents, moving to FHIR.

What they share

Despite their different architectures, Europe's national health record systems share four traits: a national patient identifier with a strong citizen login, a start with CDA documents before structured FHIR data, a shift from opt-in to opt-out enrolment, and the patient summary and e-prescription as the first services exchanged across borders through MyHealth@EU.

  • Identity first. A national patient identifier (INS in France, NHS number, Krankenversichertennummer, PESEL-linked IDs) and a strong citizen login (eIDAS-notified schemes, NHS login, ID Austria).
  • Documents before data. Most systems began by exchanging CDA documents (discharge letters, reports, summaries) through IHE XDS registries; structured FHIR data came later, led by medication, vaccination and lab results.
  • Opt-out replaced opt-in. Germany (2025), France, Austria and others moved to records created by default with a right to object, after opt-in programmes stalled.
  • The patient summary and e-prescription first across borders. These are the two services every country joined MyHealth@EU with, and the first two priority categories under the EHDS.

How a vendor connects

A software vendor connects to a European national health record by finding the operator's developer programme, meeting its certification and hosting requirements, implementing the national FHIR or CDA profiles and identity integration, testing in the national sandbox and completing onboarding. Each country keeps its own route; the EHDS adds a common European exchange format on top.

  1. Identify the operator and its developer programme: gematik, ANS, the Italian Ministry's FSE 2.0 documentation, NHS England's API catalogue, MedMij, ELGA GmbH, CeZ.
  2. Read the conformance requirements: certification or referencing (Ségur in France, MedMij labels, DTAC in England, gematik approval), hosting (HDS in France), security (DSPT, ISO 27001).
  3. Implement the national profiles: the country's FHIR core (UK Core, nl-core, the German Basisprofile, ELGA CDA guides) and the identity integration.
  4. Test against the national sandbox or reference environment, then go through onboarding.
  5. Plan for the EHDS: the European EHR exchange format and the patient-access obligations will apply on top of national rules, with the first deadlines around 2029.

For a personal record

A personal, patient-controlled health record does not replace Europe's national health record systems. It gathers what a person is entitled to receive from each national system, through patient access, downloads, documents and clinic connections, into one FHIR record under the person's control, which they can then share with any clinic in any country.

A patient-controlled record such as Anpheros does not replace the national system; it collects what the person is entitled to from each of them (through patient access APIs, downloads, documents and clinic connections) into one FHIR record the person controls, and gives it back to any clinic the person chooses, in any country. See Health data portability and How to transfer your medical records.

National systems change often. This page describes the situation as published by the operators linked under Sources, last reviewed in October 2026; the operator's documentation is the authority for connection requirements.

Sources

Frequently asked questions

Which country has the most complete national record?

Estonia, Denmark and Finland have had near-universal national records for over a decade; Austria's ELGA and Poland's P1 are complete for documents and prescriptions; Germany's ePA became the largest by population after the 2025 opt-out rollout. Completeness of structured data varies everywhere.

Can a vendor connect to all of them with one integration?

Not yet. Each has its own identity, onboarding and profiles. The EHDS aims to make the exchange format common; connection and certification will remain national for the foreseeable future.

Do national records talk to each other?

Through MyHealth@EU for the patient summary and ePrescription between participating countries; more categories (lab results, images, discharge reports) are being added under the EHDS. Outside that, cross-border exchange is manual.

Where does the United States fit?

It has no national record. Exchange runs through networks (Carequality, CommonWell, now TEFCA QHINs) with a federal data standard (USCDI) and patient access rights to provider APIs.

Anpheros Platform

Try it free in the sandbox

Your first FHIR call in 5 minutes. An HL7 FHIR R4 API with the patient's consent built in: try it in the sandbox, then connect your own app or clinic system.

Free · 30 synthetic patients · no card

This guide is for information and does not replace medical advice. For decisions about your health, talk to your doctor. In an emergency, call your local emergency number (112 in Europe).
Written by
The Anpheros team

Anpheros builds a medical record that the patient controls and can share with any clinic, on an HL7 FHIR R4 platform, based in the EU. These guides help you understand and organise your health; they do not replace your doctor.

About Anpheros →
Anpheros

The more you log, the clearer your record

Your health history in one place, under your control.

Symptom diaryPatterns show over time
Emergency cardQR in your phone's Wallet
All your resultsLabs and reports together
You decideWho sees what, and for how long
Create your free account

Free · Works in your browser · No card