On 12 March 2020, the French Data Protection
Authority1 ("DPA") announced
its objective for the year 2020 to conduct formal procedures of
control over processing activities based on a thematic approach.
The French DPA therefore intends to operate controls with regard to
the three following themes:
Security of health data
As sensitive personal data is [are] subject to strict conditions
of processing, in particular with regard to the requirements set
out under Article 9 of the EU General Data Protection Regulation
2016/679 ("GDPR"), the French DPA wishes
to ensure that appropriate measures of security are being
implemented when players operate processing activities involving
this type of data2.
