Health data

France: the CNIL has released its annual dawn raid Program for 2023: four national priorities and one priority coming from the EDPB!

Authors: Denise Lebeau-Marianna, Divya Shanmugathas and Lucie Dubecq-Princeteau On 15 March 2023, the French Supervisory Authority (the “CNIL”) unveiled in a post its four key priorities regarding its upcoming investigations for 2023 targeting specific sectors (I), to which it added another topic related to DPO in line with the coordinated enforcement framework of the European …

France: the CNIL has released its annual dawn raid Program for 2023: four national priorities and one priority coming from the EDPB! Read More »

Genetic information – global privacy considerations – an Australian and UK perspective

Authors: Eliza Saunders, Sarah Birkett, James Clark, Senal Premarathna Introduction The benefits of using genetic information for research purposes are clear, especially as the technology underpinning medical research continues to advance at such a rapid pace. Outside of research and clinical development, the number of organisations which use blood and saliva samples and other genetic …

Genetic information – global privacy considerations – an Australian and UK perspective Read More »

UK: New National Strategy for Health Data

Author: James Clark The UK’s Department for Health and Social Care (“DHSC”) has published a major strategy document (‘Data saves lives: reshaping health and social care with data’) outlining the government’s plans for the regulation and use of data in healthcare. In this post, we look at some of the most interesting proposals outlined in …

UK: New National Strategy for Health Data Read More »

France: New guidance for data retention

By Denise Lebeau-Marianna – Partner and  Yaël Hirsch – Senior Associate The French Supervisory Authority (the “CNIL”) has issued new updated guidelines on data retention during the month of July (the “CNIL’s Guidelines”)[1]. They provide more practical guidance and update the CNIL previous Recommendations dated 11 October 2005 on the conditions of archiving personal data[2]. …

France: New guidance for data retention Read More »

The Netherlands: DPA changes position – taking temperature might not be subject to GDPR

Since the COVID-19 outbreak, the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, “Dutch DPA”) had made it clear, on several occasions, that taking temperature tests (or otherwise processing health data) as a precautionary measure in light of COVID-19 is a strict “no go”. The position of the Dutch DPA was that most individuals, in particular employees …

The Netherlands: DPA changes position – taking temperature might not be subject to GDPR Read More »

The Netherlands: Health sector once again on the radar of DPA

The Dutch Data Protection Authority (Autoriteit Persoonsgegevens,  “Dutch DPA“) previously stated that it shall focus its enforcement actions on the public and health sector, and seems to act upon its words. Just a few months after the Dutch DPA inspected more than 100 hospitals and health insurers on whether they comply with the obligation to …

The Netherlands: Health sector once again on the radar of DPA Read More »

FRANCE: The new Health Information Institute in France

In France, the Health Information Institute (‘INDS’) has begun to accept requests for authorisation to access the new National Health Data System (‘SNDS’), as part of measures brought in by Act No. 2016-41 of 26 January 2016 (the ‘Reform Law’). Carol Umhoefer (DLA Piper Partner, Miami) and Jeanne Bossi Malafosse, Partner at Delsol Avocats, assess the …

FRANCE: The new Health Information Institute in France Read More »