A data system for managing the settings for configuring a hearing aid includes a hearing aid (10, 11) and a remote server (25). The hearing aid (10, 11) has a processor (121). a first memory segment (110-112) for storing said configuration settings, a transceiver (122) adapted for establishing a wireless connection to an Internet enabled personal communication device (13), and a second memory segment (114) for storing at least one security element. The remote server (25) is adapted to set up a secure session with said hearing aid via said personal communication device (13) acting as a gateway. The processor (121) allows said remote server (25) to edit said settings for configuring the hearing aid (10, 11) stored said first memory segment (110-112) during a secure session set up under control of said at least one security element stored in the second. memory segment (114).