Subsection 2: Hosting of personal health data on digital media subject to certification

The hosting of personal health data on a digital medium within the meaning of II of Article L. 1111-8 is considered to be the act of carrying out, on behalf of the data controller referred to in 1° of the I of Article R. 1111-8-8 or of the patient mentioned in 2° of the I of the same article, all or some of the following activities: 1° Making available and…

I.-The certificate of conformity referred to in II of article L. 1111-8 is issued by a certification body on the basis of a certification reference framework drawn up by the public interest group referred to in article L. 1111-24 and approved by order of the Minister for Health, issued after consultation with the Commission nationale de l’informatique et des libertés. II – The certification body referred to in II of…

I.-The hosting contract referred to in the last paragraph of I of Article L. 1111-8 is concluded between the hosting provider and its customer. It contains at least the following clauses: 1° An indication of the scope of the certificate of compliance obtained by the hosting provider, together with the dates of issue and renewal; 2° A description of the services provided, including the content of the services and the…