CRANE is an H2020 Pre-Commercial Procurement European project that aims to develop an integrated self-management model to improve chronic patient's wellbeing through the European Health Data Space concept implementation. The CRANE Data Marketplace serves as a secure digital ecosystem where organisations can publish, discover, and exchange data services under a shared governance framework. It acts as a directory service of governed Data Sources within the CRANE health data ecosystem. Unlike traditional data-sharing arrangements, it provides a structured environment where multiple organisations, including healthcare providers, social care systems, and the welfare tech industry, can participate and enter into bilateral agreements dynamically in a trusted and governed manner.

A Data Agreement specifies the precise terms governing how data can be utilised and shared between an individual and an organisation. Often formulated based on a Data Protection Impact Assessment (DPIA), it creates a clear contractual relationship that protects both data providers and consumers whilst enabling legitimate data flows.

Derived from a Data Agreement, the Data Disclosure Agreement (DDA) formalises the specific conditions under which data is made available and accessed between two organisations. It provides transparency on data characteristics, quality, and permissible use cases before any exchange occurs.

The diagram below illustrates the Data Exchange Agreements (DEXA) landscape that underpins the CRANE Data Marketplace. It shows how the different agreement types work together to enable trusted, governed data exchange across the ecosystem.

At the centre is the Individual (citizen or patient), connected to organisations through Data Agreements that define the terms of data usage. Organisation A (the Data Source / Issuer / Data Producer) and Organisation B (the Data Using Service / Verifier / Data Consumer) are linked by a Data Disclosure Agreement that governs organisation-to-organisation data sharing. A Data Processing Agreement connects the data Supplier to Organisation A.

Above the individual, a Delegate can act on their behalf through a Delegation Agreement, supporting caregiver scenarios. Each organisation holds a Business Wallet for cryptographic identity verification using eIDAS 2.0, while the Delegate uses an EUDI Wallet.

This framework ensures that every data transaction, whether between an individual and an organisation, or between two organisations, is governed by explicit, auditable agreements aligned with GDPR and the European Health Data Space concept.

All ecosystem data transactions leverage eIDAS 2.0-based Business Wallets to provide cryptographic verification of each organisation's identity (via Legal Person Identification Data). This technical infrastructure ensures that all marketplace participants are who they claim to be, creating a foundation of trust essential for secure data exchange. As CRANE aims to build trust with patients through transparent and open policies, the use of verifiable credentials and decentralised identity ensures that data sharing is both secure and auditable.

The Privacy Dashboard is a data rights management interface integrated into the citizen's mobile application. Built on ISO standards (ISO 27560), it provides a clear overview of every data processing activity involving your personal data.

As shown in the screenshot, the Privacy Dashboard presents an Overview section with contact details for the Data Protection Officer, followed by a list of all Data Agreements associated with your account. Each agreement represents a specific dataset, for example Continuous Glucose Monitoring (CGM), User Registration Data, Insulin Usage, Research Use of Data, or Contractual Purpose. Beside each agreement is a toggle switch showing the current status: Allow (green) or Disallow (grey). You can tap any agreement to view its full details or tap the toggle to change your consent preference in real time.

Through the Privacy Dashboard, you can:

• View all data agreements regardless of their lawful basis under GDPR Article 6, whether consent, legitimate interest, contractual necessity, legal obligation, or public interest
• See exactly which datasets are being collected and for what purposes, fulfilling the transparency requirements of GDPR Article 5(1)(a)
• Exercise your rights by allowing or disallowing data processing for each agreement
• Monitor how your data is being consumed at any given time across all ecosystem participants
• Contact the Data Protection Officer for any queries about data management

When data is shared between CRANE d-HDSI ecosystem participants, the Consent Module activates to ensure you are fully informed before any data exchange occurs.

The Consent Module presents:

• The full details of the Data Agreement, including what personal data attributes will be shared
• The lawful basis for processing under Article 6 (e.g., consent, legitimate interest, contractual purpose)
• Data retention periods, geographic restrictions, and storage locations
• The identity of the data controller and any receiving organisations
• Policy URLs and jurisdiction information

You can review all data attributes that will be exchanged before giving or withdrawing consent, in accordance with Article 7. This ensures every data sharing transaction is transparent and under your control.

The CRANE d-HDSI ecosystem is built on the foundational principles of GDPR Article 5, which requires that personal data is processed lawfully, fairly, and transparently. All data processing within the ecosystem must have a valid lawful basis under GDPR Article 6, whether that is consent, contractual necessity, legitimate interest, or another legal ground.

Through the Privacy Dashboard and Consent Module, you can exercise the following rights:

• Right of Access (Article 15): View all data being processed about you through the Privacy Dashboard, including the purposes and categories of data involved
• Right to Rectification (Article 16): Request corrections to inaccurate personal data held by any ecosystem participant
• Right to Erasure (Article 17): Request deletion of your personal data when it is no longer necessary for the original purpose (right to be forgotten)
• Right to Restriction (Article 18): Limit how your data is processed by toggling data agreements to 'Disallow' in the Privacy Dashboard
• Right to Data Portability (Article 20): Receive your data in a structured, commonly used, and machine-readable format
• Right to Object (Article 21): Object to data processing, particularly where processing is based on legitimate interest or used for research purposes
• Right to Withdraw Consent (Article 7(3)): Withdraw your consent at any time through the Privacy Dashboard toggle, as easily as it was given

These rights are built directly into the ecosystem's technical infrastructure, making them easy to exercise without complex legal procedures. The Privacy Dashboard provides a unified view across all participating organisations, ensuring full transparency.