The National Commission for Information Technology and Liberties (CNIL) and the High Authority for Health (HAS) have signed a partnership agreement which aims to strengthen good practices, particularly in terms of the protection of personal data and the promotion of fundamental rights linked to digital tools in the health, social and medico-social sectors. Communiqué.
Digital tools and artificial intelligence (AI) are profoundly transforming the healthcare system. In order to support the growth of these technologies while guaranteeing the quality and security of practices in compliance with the law, the National Commission for Information Technology and Liberties (CNIL) and the High Authority for Health (HAS) have concluded a partnership agreement. They are committed to collaborating and sharing their expertise to support professionals who work on the ground in the health, social and medico-social sectors, users of the health system as well as manufacturers who develop new solutions, in the implementation of good practices.
This partnership is structured around various actions, including:
- promoting the protection of personal data and fundamental rights linked to the use of digital tools, particularly those using AI, in the health, social and medico-social sectors;
- support for actors by the operational adaptation of European requirements to the specific context of the French health system;
- improving the practices of stakeholders of these sectors in terms of personal data protection and health data security in particular;
- taking into account the requirements linked to the relevant development of digital and AI in practicein connection with the certification of health establishments or the evaluation of establishments and services in the social and medico-social sector.
This partnership also aims, when relevant, to provide healthcare professionals and establishments with a common position from the two referring institutions, in order to facilitate the appropriation of recommendations in clinical practice.
First step: a joint recommendation is expected on 2e quarter 2026 on the proper use of artificial intelligence in the healthcare context for healthcare professionals and establishments, specifying in particular the legal and regulatory framework.
Professor Lionel Collet, president of HAS
“Digital technology represents a lever for improving the quality, access and relevance of care and support, through telehealth, prescription assistance software, decision support systems and other digital tools intended to help professionals and patients. These tools are integrating more and more AI and are already entering into practice. We are also aware of the challenges and associated risks linked in particular to the exploitation, sharing and reuse of personal and health data, which is why questions linked to the integration of these technologies into professional uses and practices occupy an important place in HAS’s missions. Our direction is clear: to promote thoughtful, informed, responsible and legal use. Faced with the extremely rapid development of these technologies, we must work together to enlighten users (patients, professionals, establishments) on their uses and good practices, without putting them at odds with the legal framework which poses a certain number of rights and obligations. This partnership with the CNIL takes on its full meaning. »
Marie-Laure Denis, president of the CNIL
« The development of digital technology and artificial intelligence in health cannot be sustained over time without the trust of patients and professionals. This trust must be based on strong data protection guarantees and a clear understanding of everyone’s responsibilities. Through this partnership, the CNIL and the HAS intend to provide operational benchmarks to secure uses, prevent risks of infringement of people’s rights and support responsible innovation, serving the general interest. »
À propos de la Commission nationale de l’informatique et des libertés
La Commission nationale de l’informatique et des libertés (CNIL) est le régulateur des données personnelles. Autorité administrative indépendante, elle accompagne les professionnels dans leur mise en conformité et contrôle la mise en œuvre des traitements, notamment à travers la gestion des plaintes.
Elle aide les particuliers à maîtriser leurs données personnelles et exercer leurs droits ; conseille les pouvoirs publics sur les questions relatives à la protection des données ; et mène une activité d’innovation et de prospective sur les enjeux numériques.
Press release, March 11, 2026
