Digital Trust PractitionersAssociation of Digital Trust Practitioners · TrustPractitioners.org
JoinJoin
REGULATORY WATCH BRIEF Moderate 53 📋 Proposed Regulation proposed

CNIL examines draft deliberation authorizing BIG DATA SANTE to process personal data for anonymized medical research (ONCOVAL)

If approved, the authorization would enable a French company to process health‑related personal data for research, shaping data‑privacy practices in the health sector.

ADTP Regulatory Watch · October 8, 2026 · Commission nationale de l'informatique et des libertés (CNIL)
ImpactModerate 53
Type📋 Proposed Regulation
Statusproposed not law
JurisdictionEU-FR

What happened

During its plenary session on 8 October 2026, the CNIL will consider a draft deliberation that would permit BIG DATA SANTE (Octopize Mimethik Data) to carry out automated processing of personal data to create anonymised datasets for medical research, called ONCOVAL. The proposal is examined under the CNIL’s internal procedures before any approval.

Why it matters for trust and compliance

  • Its status is proposed. It is not law yet. Track it, but do not treat it as an obligation.
  • If approved, the authorization would enable a French company to process health‑related personal data for research, shaping data‑privacy practices in the health sector.

Who is affected

healthcare technology controller processor BIG DATA SANTE (Octopize Mimethik Data)

Recommended actions

  1. Check that privacy notices describe the practices this addresses.
  2. Revisit retention schedules and data minimisation for the data involved.
  3. Inventory AI or automated decision systems in scope and their assessments.
  4. Confirm handling of sensitive data categories meets the stricter rules.