French Government Moves to Secure Medical Data Hosting Amid Privacy Concerns and Faces Legal Scrutiny Over Tax Data Access

The French government is actively seeking a new hosting provider for its national medical data platform, which was previously managed by Microsoft, due to concerns over the security and potential access to sensitive health data by U.S. authorities. This decision highlights heightened vigilance about the confidentiality and protection of French citizens' medical information.

In parallel, France's mechanisms for tax authorities accessing citizens' banking information are under scrutiny following a recent ruling by the European Court of Human Rights (ECHR). On January 8, 2026, Italy was condemned for violating Article 8 of the European Convention on Human Rights, which guarantees privacy rights, after its tax administration exercised overly broad access to banking data without sufficient legal safeguards. The court found Italy's framework lacked adequate independent oversight and did not require justifications for such data requests, exposing taxpayers to arbitrary actions.

The ECHR's ruling, while not forbidding tax data access, emphasized the need for clearer legal protections and avenues for taxpayers to challenge such requests before tax assessments are finalized. Similar shortcomings have been identified in French law, putting France at risk of a comparable condemnation if reforms are not made.

This dual development reflects France's broader commitment to enhancing data privacy and security. While it moves to repatriate medical data hosting to reduce foreign jurisdiction risks, it also faces pressure to strengthen legal frameworks governing tax authorities’ access to personal financial information, ensuring compliance with European privacy standards and safeguarding citizens’ rights.