@element Virkkunen just (re)announced an "action plan to protect the health sector from cyberattacks".
https://digital-strategy.ec.europa.eu/en/news/commission-unveils-action-plan-protect-health-sector-cyberattacks
Involves ENISA and Horizon, proposes a new "pan-European Cybersecurity Support Centre" and of course produces a consultation. I hope "cybersecurity maturity assessments" and "procurement guidelines" will cover whether doctors swap patient data in plain text from gmail (I've seen the best hospitals in Milan do it with cancer patients).