French Health Data Hub must work with DPA, says government

France’s Council of State has ordered the Health Data Hub to share information on its pseudonymisation procedures with the country’s data protection agency CNIL.

That will allow the authority to verify if the measures ensure sufficient protection of the data to prevent, as far as possible, identification of individual people, the council said.

In April the ministry of health decreed the hub should receive data of public interest to help in France’s fight against coronavirus. On 19 June the Council of State dismissed an appeal against the decree.

Part of the Health Data Platform, the hub was set up last year as an element in France’s digital health platform for patients planned for 2022.

In its 19 June ruling, the Council of State also asked the Health Data Platform to supplement information on its website and noted the CNIL had validated the level of security measures the Health Data Platform had put in place.


Join our free-to-attend digital event, Last Thursday in Privacy, addressing data protection, privacy and security challenges including working from home, COVID-19, global regulations and more. Visit

We have been awarded the number 1 GDPR Blog in 2019 by Feedspot.