France — EHDS Readiness Profile
Score: 92 / 100 — Tier A (Advanced) · Evaluated: 21 March 2026
France ranks first among all evaluated EU member states on the EHDS Readiness Score. Its position reflects two decades of sustained national investment in health data infrastructure, anchored by the Système National des Données de Santé (SNDS) and, since 2019, the Health Data Hub.
Where most countries are still designating bodies and drafting laws, France already operates a live secure processing environment, a comprehensive data catalogue, and a fully functioning researcher access pipeline.
The only material gaps are in EHDS-specific legislation (still in consultation, not yet enacted) and patient-facing data portability (announced but not yet live in Mon Espace Santé). Both are on credible timelines for closure within the next 12 months.
Scorecard
D1 — Legal & Regulatory Foundation (10/15)
D1a — National EHDS implementation legislation (5/5)
France has not yet enacted EHDS-specific transposition legislation, but the process is actively underway. The Délégation au Numérique en Santé (DNS) opened a public consultation from April 28 to May 30, 2025, specifically on adapting the French legislative framework for the EHDS regulation, which entered into force in March 2025. The deadline for national adaptation is March 2027.
The 2026 Doctrine du Numérique en Santé, published by DNS and the Agence du Numérique en Santé (ANS), explicitly addresses the impact of EHDS on national regulatory frameworks, interoperability standards, and security requirements. This places France firmly in the draft/consultation phase — real legislative machinery is turning, but nothing has been enacted yet.
D1b — Legal basis for secondary use of health data (5/10)
France's legal foundation for secondary use predates the EHDS by several years. The Loi relative à l'organisation et à la transformation du système de santé (24 July 2019), specifically Article 41, created the Plateforme des données de santé (Health Data Hub) and established the statutory basis for secondary use of health data.
This gives France an explicit, enacted legal basis for secondary use — not a general data protection framework repurposed, but a purpose-built statutory regime. The SNDS itself is governed by separate provisions in the Code de la santé publique (Articles L1461-1 et seq.), further reinforcing the legal architecture.
D2 — Primary Use: Infrastructure (20/20)
France is confirmed live on MyHealth@EU with all four cross-border e-health services operational — Patient Summary Receiving, Patient Summary Sending, ePrescription Receiving, and ePrescription Sending. France's implementation is delivered through the Sesali.fr service, managed by ANS.
This is a perfect score. France is one of a small group of countries (alongside Finland, Austria, Poland, and Czechia among evaluated states) with full MyHealth@EU connectivity.
D3 — Primary Use: Patient Empowerment (13/15)
D3a — National patient portal (7/7)
Mon Espace Santé (monespacesante.fr) is France's national patient health portal, live and available to all residents covered by the French social security system. Launched in early 2022, it replaced the earlier Dossier Médical Partagé (DMP). The portal provides access to prescriptions, hospital reports, laboratory results, vaccination records, medical history, allergies, and health measurements. It includes secure messaging with healthcare professionals and a service catalogue of approved health applications.
D3b — Patient consent mechanism (5/5)
Mon Espace Santé provides an operational, granular consent management system. Patients can hide specific documents from healthcare professionals, enable or disable access on a per-professional basis, set confidentiality levels for different types of records, and close their account entirely. This goes beyond a simple on/off toggle — patients have meaningful, document-level control over who sees what.
D3c — Data portability (1/3)
This is the one soft spot in France's primary use story. Mon Espace Santé has announced Phase 2 functionality that will allow users to share health data with approved third-party applications. However, as of March 2026, this feature is not yet confirmed as live. There is no documented bulk download or structured data export capability available to patients today.
D4 — Secondary Use: Governance (20/20)
D4a — Health Data Access Body designated (8/8)
France's HDAB equivalent — the Health Data Hub (Plateforme des données de santé) — was formally designated by Article 41 of the Loi Santé of 24 July 2019. It is a Groupement d'Intérêt Public (GIP), a public-interest legal entity with its own governance, budget, and statutory mandate.
D4b — HDAB operational (8/8)
The Health Data Hub is fully operational. Its website provides a live project submission portal, a searchable data catalogue, service descriptions, and documentation for both data users and data holders. The HDH has supported over 200 projects since its inception, processing data access requests from researchers, startups, and public health institutions.
D4c — Oversight framework (4/4)
The HDH has published its data access rules, eligibility criteria, application procedures, and review processes. The framework includes defined stages for application review, CNIL oversight where required, and a scientific and ethical evaluation committee.
D5 — Secondary Use: Data Infrastructure (20/20)
D5a — Secure Processing Environment (10/10)
The Health Data Hub operates a live SPE where approved researchers can analyse health data without extracting it. The SPE has processed data for over 200 projects — this is not a pilot or proof-of-concept, but a production system with years of operational history. France is also a participant in the HealthData@EU Pilot, confirming SPE capability at a continental interoperability level.
The current infrastructure runs on Microsoft Azure, which has been a point of political and regulatory contention. The HDH is actively migrating to a SecNumCloud-certified sovereign cloud infrastructure, with a target completion by end of 2026 and €6.2M allocated for the transition.
D5b — National health data catalogue (6/6)
The HDH provides a comprehensive, publicly accessible data catalogue covering the SNDS and multiple additional health dataset types. A decree of 7 February 2025 expanded the SNDS catalogue with additional databases. The HDH has also implemented a DCAT-AP compliant metadata catalogue — the European standard for data catalogue interoperability.
D5c — Researcher data access application process (4/4)
Applications are submitted through the HDH portal. There is a defined review process involving scientific and ethical evaluation, CNIL consultation where required, and stated timelines. With over 200 projects approved and processed, this is one of the most mature research data access pipelines in the EU.
D6 — Investment & Momentum (9/10)
D6a — EU4Health / HaDEA funding (4/4)
The French_HealthData_EU project, co-financed by an EU4Health Direct Grant, is led by the Health Data Hub with 18 consortium partners. France also participates in the HealthData@EU Pilot — the pan-European project building the pilot infrastructure for secondary use of health data.
D6b — RRF digital health allocation (2/3)
France's Recovery and Resilience Facility plan devotes 21% of its total allocation to digital transition, with health as a component within that broader category. However, EHDS is not named as a separate milestone or investment line in the RRF plan.
D6c — National budget commitment (3/3)
The France 2030 Digital Health Acceleration Strategy (Stratégie d'Accélération Santé Numérique, SASN) provides a multi-year investment framework. Specific allocations include €6.2M for the sovereign cloud migration and €122M for digital health skills frameworks. These are line items in enacted budgets with delivery timelines and responsible agencies.
Key Gaps and Watch Items
D1a — EHDS transposition legislation. The public consultation closed in May 2025. Actual legislative text has not yet been published. The March 2027 deadline gives France 12 months. Given the existing legal infrastructure, the adaptation should be less disruptive than for countries building from scratch — but legislative timelines in France are unpredictable, particularly with coalition politics.
D3c — Patient data portability. Mon Espace Santé Phase 2 is the vehicle, but there is no confirmed go-live date. This is a 2-point gap that could be closed quickly once the feature ships.
SPE sovereign cloud migration. Not a scoring gap (France already scores 10/10 on D5a), but a strategic risk. The migration from Azure to SecNumCloud is politically charged and technically complex. Delays could become a narrative issue even if the current SPE remains fully functional.
Comparison with Peer Countries
| Country | Total | Tier | Strongest | Weakest |
|---|---|---|---|---|
| France | 92 | A | D2, D4, D5 (all perfect) | D1 (legislation pending) |
| Finland | 91 | A | D2, D4, D5 (all perfect) | D6 (investment 8/10) |
| Germany | 72 | B | D1 (15/15, full marks) | D2 (0/20, no MyHealth@EU) |
| Austria | 55 | B | D2, D3 (strong primary use) | D4, D5 (no secondary use) |
| Belgium | 53 | B | D4 (20/20 governance) | D2 (0/20, no MyHealth@EU) |
France and Finland are the only two Tier A countries among those evaluated to date. France edges ahead by 1 point, driven by stronger investment and momentum (D6: 9 vs 8). The practical difference is negligible — both countries have mature, operational systems across nearly every dimension.
Report generated by Health Edge EHDS Readiness Evaluator — 21 March 2026. Methodology: healthedge.eu/methodology