From Regulation to Practice: EHDS Compliance and Information Security in Health Data Management