Legal file · 5.06

5.06 — Maintaining Certified Health-Data Hosting

The Plan treats certified hosting as a legal safeguard. HDS certification is a baseline; it does not replace access management, encryption, logging, backups, subcontractor control and reversibility.

5.06 — Maintaining Certified Health-Data Hosting
5.06 — Maintaining Certified Health-Data Hosting

What the Plan proposes

Plan source: the measure title, stated effect and evidence level come from the public Plan de Rupture. This page adds an initial legal and operational architecture requiring expert review.

The Plan treats certified hosting as a legal safeguard. HDS certification is a baseline; it does not replace access management, encryption, logging, backups, subcontractor control and reversibility.

Status: structured citizen prototype requiring review by ministries, the Conseil d’État, professionals, patient representatives and competent authorities.

Implementation path

  1. Classify dataIdentify personal health data and its sensitivity.
  2. Check certificationVerify the exact certificate scope and validity.
  3. Limit accessApply need-to-know rules and log access.
  4. Secure the lifecycleEncrypt, back up, test, notify and delete.
  5. Prepare exitExport usable data and certify final deletion.

What must be measured before and after

Baseline

Initial data, perimeter, population and full costs.

Quality of care

Safety, continuity, delays and patient outcomes.

Workforce effects

Training, workload, mobility, attractiveness and working conditions.

Net effect

Gross savings minus transition, recurring costs and shifted burdens.

Official sources

  1. Agence du Numérique en Santé — HDS
  2. CNIL — sécurité des données de santé