{"id":2694,"date":"2026-03-18T13:03:21","date_gmt":"2026-03-18T12:03:21","guid":{"rendered":"https:\/\/blog.eprivacy.eu\/?p=2694"},"modified":"2026-04-21T14:30:35","modified_gmt":"2026-04-21T12:30:35","slug":"digav-amendment-2026-systematic-effectiveness-measurement-and-new-obligations-for-diga-manufacturers","status":"publish","type":"post","link":"https:\/\/blog.eprivacy.eu\/?p=2694&lang=de","title":{"rendered":"DiGAV Amendment 2026: Systematic Effectiveness Measurement and New Obligations for DiGA Manufacturers"},"content":{"rendered":"\n<p>Effective February 1, 2026, the DiGAV has been amended in several areas. The basis for this was the \u201cSecond Regulation Amending the Digital Health Applications Regulation\u201d. Consequently, no longer only one-time evidence is required, but regular assessments using real usage data&nbsp;are also being introduced. Several other amendments are being made in parallel.<\/p>\n\n\n\n<p>Below is a summary of the most relevant changes.<\/p>\n\n\n\n<p><strong>1. Introduction of comprehensive, ongoing effectiveness measurement&nbsp;(\u00a7&nbsp;6a; \u00a7\u00a7 23a ff. DiGAV)<\/strong><br>A separate section on in-use effectiveness measurement has been newly introduced. In addition to the existing evidence of positive healthcare effects from one-time studies, this is intended to introduce tracking of the benefits of the DiGA over the entire usage period.<\/p>\n\n\n\n<p>To this end, manufacturers must regularly collect data and report it to the BfArM:&nbsp;<\/p>\n\n\n\n<ul><li>Fulfilled prescriptions and follow-up prescriptions&nbsp;(\u00a7&nbsp;23b(2))<\/li><li>Duration and frequency of use (\u00a7&nbsp;23c)<\/li><li>Detailed information on&nbsp;terminations&nbsp;(\u00a7&nbsp;23c(5): numbers, rates, duration\u2026)<\/li><li>Patient-reported health status during use (\u00a7&nbsp;23d)<\/li><li>Patient satisfaction regarding the quality of the DiGA (\u00a7 23d)<\/li><li>Additional&nbsp;results&nbsp;regarding health status, if applicable (\u00a7 23e)<\/li><\/ul>\n\n\n\n<p>In this regard (more specifically, \u201cregarding the creation of datasets within the framework of ongoing effectiveness measurement\u201d), a new permissible processing purpose is inserted in \u00a7 4 II No. 3 (see below regarding consent).<\/p>\n\n\n\n<p><strong>2. Formal Requirements: Patient Questionnaires, Data Sets for Transmission<\/strong><br>The DiGAV now contains formal requirements for various data collection and transmission processes:<\/p>\n\n\n\n<p>a) Patient Questionnaires<br>Data on patients\u2019 health status and patient satisfaction is collected using the questionnaires provided in Annex III.<br>Patients may voluntarily consent to the use of their data regarding patient satisfaction and health status. Further processing for other purposes is prohibited without consent.<br>b) Structures and formats for data sets<br>The detailed structure of the data to be transmitted to the BfArM is set forth in Appendix IV.<br>c) Publication<br>The relevant results of the effectiveness measurements will, once they reach a certain threshold, also be published by the BfArM and thus potentially broader.<\/p>\n\n\n\n<p>This establishes binding requirements for patient questionnaires&nbsp;as well as scales and evaluations. The values of individual DiGAs will thus also be more comparable and verifiable.<br>It is recommended to integrate these formal provisions into the products and processes as early as possible and with as much detail as possible.<\/p>\n\n\n\n<p><strong>3. Demonstration of the Maintenance of Earning Capacity<\/strong><br>Guidelines are now also provided on how the demonstrated benefit of a DiGA in the form of the maintenance of work capacity is to be structured (\u00a7&nbsp;11b).&nbsp;<br>The DiGAV largely refers to the binding requirements for demonstrating positive healthcare effects, meaning that existing experience can partly be relied upon for the procedure.<br>To this end, a new permissible processing purpose is added in \u00a7 4 II No. 2a (see below regarding consent).<\/p>\n\n\n\n<p><strong>4. Interoperability with the ePA<\/strong><br>Interoperability is established as a requirement in the DiGAV (\u00a7 6a):<br>DiGAs must be able to transfer the processed data\u2014with the patient\u2019s consent\u2014to the ePA. To this end, the following is required:&nbsp;&nbsp;<\/p>\n\n\n\n<ul><li>use of the interface specified by Gematik,<\/li><li>export in a human-readable format, and<\/li><li>specifications for semantic and syntactic interoperability (pursuant to \u00a7 355(2a)&nbsp;Social Code Book V).<\/li><\/ul>\n\n\n\n<p><strong>5. New regulation on \u201csignificant modifications\u201d (\u00a7&nbsp;18)<\/strong><br>The revised version also specifies when a significant modification has occurred.<\/p>\n\n\n\n<p>Minor or purely editorial changes&nbsp;to the information in the directory and, for example, to the results of the application-accompanying performance measurement can now be reported via simplified notifications (forms from the BfArM)\u2014reported in aggregated form four times per year.<\/p>\n\n\n\n<p>Significant modifications stay the same. These include, for example, modifications&nbsp;with a significant impact&nbsp;on:&nbsp;<\/p>\n\n\n\n<ul><li>Safety, functionality, and quality of the DiGA,<\/li><li>Data protection and data security,<\/li><li>Evidence of positive healthcare effects or the maintenance of earning capacity<\/li><\/ul>\n\n\n\n<p>On the one hand, this brings simplifications and a potential reduction in the number of reports. On the other hand, determining the significance of modifications in individual cases will create new ambiguities.<\/p>\n\n\n\n<p><strong>6. AI Act<\/strong><br>The DiGAV now explicitly refers to the EU AI Act. Manufacturers must now provide information regarding compliance with the requirements of the AI Act, at least to the extent that its applicability extends to the DiGA or parts thereof (\u00a7&nbsp;2 (1) sentence 2 no. 4a).<\/p>\n\n\n\n<p><strong>7. Recommendations<\/strong><br>In light of these changes, the following is particularly recommended:&nbsp;&nbsp;<\/p>\n\n\n\n<ul><li>Review and, if necessary, adaptation of existing&nbsp;consent&nbsp;processes and texts as well as related information.<br>In particular, with regard to the application-accompanying performance measurements and evidence regarding the maintenance of earning capacity\u2014for which new permitted purposes have been added in \u00a7 4 (2)\u2014new consent concepts are likely to be necessary in many cases.<\/li><li>Alignment of documented data flows with the new requirements for measuring success and providing evidence of earning capacity,<\/li><li>Review and supplementation of existing data protection impact assessments,<\/li><li>Creation of processes and formats for the newly introduced reporting obligations,<\/li><li>Updating of transparency information as well as internal reporting and documentation processes.<\/li><\/ul>\n\n\n\n<p>This information is intended for initial orientation&nbsp;and does not replace individual legal consultation. We are happy to assist you with a detailed assessment of the implications for your specific DiGA application.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Effective February 1, 2026, the DiGAV has been amended in several areas. The basis for this was the \u201cSecond Regulation Amending the<\/p>\n<p class=\"link-more\"><a class=\"myButt \" href=\"https:\/\/blog.eprivacy.eu\/?p=2694&#038;lang=de\">Read More<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[10],"tags":[],"_links":{"self":[{"href":"https:\/\/blog.eprivacy.eu\/index.php?rest_route=\/wp\/v2\/posts\/2694"}],"collection":[{"href":"https:\/\/blog.eprivacy.eu\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.eprivacy.eu\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.eprivacy.eu\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.eprivacy.eu\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2694"}],"version-history":[{"count":1,"href":"https:\/\/blog.eprivacy.eu\/index.php?rest_route=\/wp\/v2\/posts\/2694\/revisions"}],"predecessor-version":[{"id":2695,"href":"https:\/\/blog.eprivacy.eu\/index.php?rest_route=\/wp\/v2\/posts\/2694\/revisions\/2695"}],"wp:attachment":[{"href":"https:\/\/blog.eprivacy.eu\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2694"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.eprivacy.eu\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2694"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.eprivacy.eu\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2694"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}