What happened
During its plenary session on 8 October 2026, the CNIL will consider a draft deliberation that would permit BIG DATA SANTE (Octopize Mimethik Data) to carry out automated processing of personal data to create anonymised datasets for medical research, called ONCOVAL. The proposal is examined under the CNIL’s internal procedures before any approval.
Why it matters for trust and compliance
- Its status is proposed. It is not law yet. Track it, but do not treat it as an obligation.
- If approved, the authorization would enable a French company to process health‑related personal data for research, shaping data‑privacy practices in the health sector.
Who is affected
healthcare technology controller processor BIG DATA SANTE (Octopize Mimethik Data)
Recommended actions
- Check that privacy notices describe the practices this addresses.
- Revisit retention schedules and data minimisation for the data involved.
- Inventory AI or automated decision systems in scope and their assessments.
- Confirm handling of sensitive data categories meets the stricter rules.