While EU legislators debate between opt-in and opt-out options for the secondary use of health data under the European Health Data Space (EHDS) proposal, harmonising GDPR across the bloc could provide a solution.