RGPD Sensitive data

The RGPD Sensitive Data corresponds to the General Data Protection Regulation applied to the healthcare sector.

Getting started

The General Data Protection Regulation (GDPR) is a European regulation that aims to strengthen and harmonize the protection of individuals' personal data within the European Union (EU). It came into force on May 25, 2018 and applies to all organizations that process personal data located on EU territory or targeting individuals present on EU territory.

The GDPR identifies so-called "sensitive data" which forms a special category of personal data. The health personal data fall into this category and as such, their processing is subject to specific regulations.

In certain cases, the RGPD leaves "national leeway" to Member States, so that they can provide clarifications or limitations to the rules laid down. The "Informatique et Liberté" law has applied this leeway with regard to personal health data.

Therefore, in the presence of processing involving such data, it will be advisable to refer to the RGPD, the "Informatique et Libertés" law as well as sector-specific rules (public health code, social security code...).

In practice

Consult the CNIL's fact sheets, notebooks and reference manuals on the health sector and identify the associated regulations.

When ?

Analyze the nature of the data you are going to collect, process right from the design stage of your project in order to anticipate the impact of the regulations.

Compliance

General Data Protection Regulation

Consult the RGPD.

Data Protection Act

Loi n° 78-17 du 6 janvier 1978 relative à l'informatique, aux fichiers et aux libertés.

Decree on Data Processing and Individual Liberties

Decree n° 2019-536 of May 29, 2019 taken for the application of the law n° 78-17 of January 6, 1978 relating to data processing, files and freedoms.

Sector-specific regulations (public health code, social security code, etc.)

CNIL standards

Consult the referentials of the CNIL

Documentation

Access all CNIL's health resources Consult the CNIL MOOC

Our experts on the subject

  • Hélène GUIMIOT-BREAUD - Head of the health department
  • If you have any questions, you can contact the telephone hotline of the CNIL health department on Monday mornings from 9:30am to 12pm) or make a written request for advice on the CNIL website.

G_NIUS saves you time

Tools to help you with your project.

Finding your way around technical doctrine

The technical doctrine presents the actions of the ministerial roadmap for the digital shift.

Access the doctrine compass