France’s Health Data Hosting (HDS) certification scheme takes effect today, replacing the previous ministerial approval process for organisations hosting personal health data on behalf of French health actors.
Key points
- Hosting of personal health data for French health actors requires HDS certification.
- Certification is issued by accredited certification bodies.
- The scheme builds on ISO/IEC 27001 with health-specific requirements.
- Existing approvals remain valid until they expire.
UK cloud, SaaS and managed service providers hosting health data for French customers will need HDS certification, or a certified hosting partner, to serve that market.
Source: Décret n° 2018-137 on health data hosting (Légifrance)
Need help understanding what this change means for your organisation? Get in touch for a pragmatic, no-obligation conversation.
