A group comprising the CNLL, the InterHop association, the Constances association and several doctors’ and patients’ unions - 18 claimants in all - had asked the Conseil d’Etat (Council of State) to suspend the processing and centralization of our data within the Health Data Hub hosted by Microsoft. In doing so, the plaintiffs asked the Council of State to comply with the latest European case law.
This referral followed the decision (“Schrems II” ruling) of the Court of Justice of the European Union (CJEU) which had decided to cancel the “Privacy Shield”, an agreement that allowed companies to legally transfer personal data from Europeans to the United States.
The CJEU had also argued that the Standard Contractual Clauses (SCC) were not sufficient. Indeed, US surveillance programs do not have any limitations on the authorization and use of data from non-US persons. This is simply not in line with European law and our protective regulation, the General Data Protection Regulation (GDPR).
On this basis, any processing of personal data of European citizens in the United States must today be considered illegal without delay.
Read More →