Diagnostics: Data and Processing
My personal assessment
- You are creating a digital service in the health field.
- You are using personal health data. This is sensitive data subject to a specific regime, in particular the GDPR regime for Sensitive Data.
- Their processing requires secure hosting (HDS, health data hosting) and information for individuals.
- These health data are only consulted by the user. You must set up a strong authentication system.
- Your service uses a directory of structures and/or professionals. Join the national reference directory to benefit from certified and up-to-date data.
- If you process personal health data and contribute to care actions. You must unambiguously identify the patient using the INS (national health identifier).
To learn more, see the regulatory topics that concern you.
What to do next? Carry out the Diagnostics of the Purpose of my service, in order to identify whether you are subject to the medical device regulation.