News · CNIL EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.

CNIL publishes compliance checklist for health data warehouse controllers

> France’s data protection authority, the Commission nationale de l'informatique et des libertés, created a compliance checklist for controllers operating health data warehouses.

Healthcare Health Data Types of Special Categories of Personal Data Controllers Supervisory Authorities
Sep 28, 2022 Source cnil.fr
Summary

The checklist is intended to help data controllers corroborate their compliance against CNIL’s reference system. If an entity does not meet a criteria in the checklist, then their warehouse would not be in compliance.

Full text

France’s data protection authority, the Commission nationale de l'informatique et des libertés, created a compliance checklist for controllers operating health data warehouses. The checklist is intended to help data controllers corroborate their compliance against CNIL’s reference system. If an entity does not meet a criteria in the checklist, then their warehouse would not be in compliance.
Full Story`

How it connects

Related across sources

Opinion 03/2022 EDPB-EDPS Joint Opinion 03/2022 on the Proposal for a Regulation on the European Health Data Space Opinion Jul 12, 2022 Healthcare Health Data Types of Special Categories of Personal Data
C-203/22 CK v Magistrat der Stadt Wien In Case C-203/22, the Court of Justice of the European Union interpreted Article 15(1)(h) of the GDPR in response to a preliminary ruling from the Verwaltungsgericht Wien… CJEU ·First Chamber Feb 27, 2025 Profiling Automated Decision-Making Marketing
W292 2292202-1 The data subject is in the military The unit he is employed at (controller) and the data subject are involved in a multitude of legal disputes concerning his employment, disciplinary proceedings, data protection… BVwG - W292 2292202-1 ·Federal Administrative Court Jun 30, 2026 Health Data Legitimate Interest Healthcare
C‑474/24 NADA Austria and Others C‑474/24 - NADA Austria and Others Several data subjects were subject to suspension proceedings by the Austrian Anti-Doping Legal Commission (ÖADR). Under Austrian law, the National Anti-Doping Agency (“NADA”)… CJEU Jul 24, 2026 Criminal Data Types of Special Categories of Personal Data Material scope (GDPR)
22/01253 Dutch Supreme Court: patient not entitled to access peer-review assessment of medical file A patient (the data subject) was treated in a hospital. Because she believed that an error had been made, she held the hospital liable. The hospital involved its liability… Hoge Raad Aug 26, 2022 Right of Access Healthcare Health Data
W211 2281442-1 The data subject and the controller both worked as nurses at the same hospital, on different wards Over ten years before the events in question, the data subject had been hospitalised as a patient on the ward where the controller worked as a nurse. The controller's daughter, a… BVwG - W211 2281442-1 ·Federal Administrative Court Jun 12, 2024 Professional Secrecy Personal Data Health Data
Related documents