Remaining liberties that GDPR provides to EU Member States as well as remaining ambiguities on GDPR interpretation keep feeding the debates in the ethical and legal literature. Projects like CINECA, seeking to facilitate health data exchanges between cohorts in Europe, Canada and Africa, offer valuable experience and input on essential ethical and legal gaps between countries and cohorts on questions such as the choice of the ethical lawful basis for international health data sharing and secondary processing for research purposes.