To simplify compliance, the committee has just published a repository on healthcare data warehouses. Content classified in the category of sensitive data by the General Data Protection Regulation.
This publication, which follows a consultation launched in March 2021, will allow organizations to dispense with the imperative prior authorization of the CNIL. Thus, from now on, “ after checking the conformity of its warehouse project with respect to the repository, the organization can declare its conformity ”.
“ The warehouse repository only applies to health data warehouses based on the exercise of a public interest mission ” recalls the authority.
“ Certain warehouses, such as those based on obtaining the consent of the persons concerned or those which have the exclusive objective of dematerializing medical files are not subject to authorization ”. The CNIL strongly suggests that organizations follow the requirements.
- The repository on the creation of health data
