Education & Syllabi

EHDS, GDPR, and Open Data Law: training that focuses on practical application

Many professionals working in healthcare, research institutes, or health-sector IT companies know they need to address GDPR requirements. But what exactly does this entail? And how does the GDPR relate to the upcoming EHDS or Open Data regulations? Antoinette Vlieger (LLM, PhD) does not offer a standard course; instead, she provides your staff with the foundation needed to make sound decisions independently, explaining the purpose of the regulations in clear, accessible language.

She has spent years as a university lecturer at the University of Amsterdam, Vrije Universiteit Amsterdam, Eindhoven University of Technology, and Clingendael. She holds a University Teaching Qualification (BKO) from the University of Amsterdam and is CRKBO-registered, meaning her training services are exempt from VAT.

Why education on the EHDS and GDPR is now urgent

The GDPR has been in place for years, yet many organizations working with health data still do not fully grasp how the legislation actually works. This has consequences: data is sometimes withheld due to unfounded fears, or conversely, processed too casually—either because people assume a data processing agreement covers everything, or because they believe they bear no responsibility if they do not come into direct contact with the data themselves.

The EHDS—the European Health Data Space—will come into effect in phases starting in 2029. Those who do not currently understand how the EHDS interacts with the GDPR and other open data legislation risk falling behind. The opportunities are immense—easier access to health data from across Europe, new research agendas, and new forms of collaboration—but these are available only to those who understand the regulations rather than trying to work around them.

 What topics are covered?

Antoinette tailors the course material entirely to your specific goals, target audience, and organizational context. With years of university teaching experience, she possesses extensive legal expertise. Topics typically addressed for organizations in the healthcare and scientific sectors include:

• GDPR: what it really entails—including the relative nature of the concept of "personal data" and the status of pseudonymized data.
• The specific GDPR assessment for data reuse versus initial use of personal data.
• Purpose limitation and legal bases for processing: when and for what purpose may you use health data?
• The EHDS: structure, timeline, obligations for data holders, and rights for researchers.
• Open Data Law: what is open data, and is it the same as public data? (a common misconception).
• Trusted holders and data intermediation: how do these new roles under data law function?
• Data processing agreements and joint controllership: determining roles and documenting arrangements.
• Scientific research: issues regarding legal bases, opt-in vs. opt-out variations by country, and the free flow of data.
• Grant law and data law: what are the rules for data generated through public funding?
• Contracting in healthcare: public-private partnerships, ERIC/EDIC structures, and grant agreements.

Other topics can also be covered; please contact us to discuss your specific requirements.

Why choose Antoinette Vlieger as your instructor?

Antoinette Vlieger combines academic depth with practical legal experience gained as both a lawyer and an in-house counsel. She holds a doctorate from the University of Amsterdam (2012) and has remained active as a university lecturer for years—not merely as a side job, but as a serious component of her professional practice. Her University Teaching Qualification (BKO) demonstrates her training in the pedagogical delivery of complex subject matter to adult learners.

What sets her courses apart is that she does not simply read out the law. She explains the rationale behind the legislation, the legislator's original intent, and—crucially—how to leverage the existing scope for maneuver. Her approach never starts with "what is prohibited," but rather with "what do you want to achieve, and how can we structure it so that it is both permissible and effective?"

• PhD↗ in Sociology of Law — University of Amsterdam (2012)
• Master’s degrees in Dutch Law & International Law — UvA
• Postgraduate specializations (Grotius↗ Academy): Privacy Law, Health Law, Administrative Law (cum laude), Corporate Law & Liability
• University Teaching Qualification (BKO↗) — UvA
• CRKBO↗-registered (education exempt from VAT)

How does it work in practice?

Send a message with a brief description of your objective, your target audience, and the context in which they operate. Antoinette will respond promptly with a proposal regarding the structure, duration, and format—ranging from a half-day session to a multi-day program. Her training is suitable as an in-house course, part of an onboarding process, an in-depth session for an experienced team, or a one-off masterclass for a board or supervisory body seeking to make informed decisions. Get in touch by clicking here.

The GDPR is a highly complex piece of legislation, yet it is certainly possible to explain it in plain language. Once you specify the training objective and the participants, Mr. Dr. Vlieger will provide tailored course materials.