E-health encompasses a set of practices, tools, and regulatory frameworks that are evolving at a rapid pace. Between the reorganization of governance bodies in France, the tightening of data protection requirements, and the arrival of artificial intelligence in care pathways, the digital health landscape is undergoing profound transformation. Assessing the current situation requires looking beyond generic definitions.
Digital Health Governance: What’s Changing in France
The institutional structuring of French e-health is entering a new phase. A specialized directorate, the DGRINES, will see its missions divided among several sub-directorates starting November 1, 2026. This reorganization reflects a need for more precise management of digital projects, from the interoperability of hospital information systems to the deployment of services aimed at patients.
At the same time, the Health Digital Agency (ANS) continues its roadmap. The ANS-Training platform offers around a hundred interactive courses developed with the CNIL, Health Insurance, and other key stakeholders. These modules cover the doctrine of digital health, national programs, and concrete use cases.
To map all the stakeholders, publications, and tools available in this field, the resources from Tsa E-Santé provide a structured entry point that complements institutional channels effectively.
European Health Data Space: The Regulatory Timeline to Know
The EHDS (European Health Data Space) is the main European regulatory project concerning medical data. The most structuring obligations will gradually apply starting in 2029. This regulation aims to harmonize the conditions for accessing, sharing, and reusing health data among member states.
Two dimensions deserve particular attention. The first concerns the primary use of data: facilitating patient access to their own medical records in any EU country. The second pertains to secondary use, meaning the exploitation of anonymized data for research, innovation, or public health policy management.
Field feedback varies regarding the ability of institutions to comply within the expected timelines. The interoperability of information systems remains a major point of friction. Many hospital structures still operate with software whose data formats do not communicate with each other.
Interoperability and Legal Obligations
For e-health stakeholders, interoperability is no longer an optional technical goal. It is becoming a legal obligation, non-compliance with which can engage the institution’s liability. Issues of compliance with GDPR, respect for medical confidentiality, and securing data exchanges intertwine within a framework that tightens year after year.
Cybersecurity of Health Institutions: Sanctions and Responsibilities
Cybersecurity is no longer a technical recommendation but a matter of concrete responsibility. A recent sanction from the CNIL illustrates this turning point: a private health institution was fined 500,000 euros for deficiencies in securing the computerized patient record and in informing individuals after a data breach.
This type of decision sends a clear signal. Security breaches in health information systems are no longer a theoretical risk. They expose institutions to heavy financial penalties, reputational damage, and, most importantly, to endangering patients whose medical data are compromised.
The most frequently noted points of vigilance during inspections concern:
- The management of access rights to the patient record, often too permissive, with shared accounts among multiple caregivers
- The absence of a formalized notification procedure in case of data breaches, while the GDPR imposes a 72-hour deadline
- The lack of encryption for sensitive data stored or transmitted between services
Artificial Intelligence and Medicine: Where Are the Concrete Uses
AI in health has moved beyond the announcement stage. Several French hospitals are currently structuring their infrastructures to accommodate diagnostic support tools, care prioritization, or early detection of pathologies. The question of data sovereignty also permeates the academic field and conditions the technological choices of research organizations.
The available data do not yet allow for conclusions about the large-scale impact of these tools on the quality of care. Experiments remain localized, and evaluation protocols vary from one institution to another. However, the regulatory question is progressing faster than clinical uses: the European framework on AI (AI Act) classifies algorithmic medical devices among high-risk systems, with requirements for transparency and traceability.
Nomenclature of Digital Medical Devices
The coverage of digital medical devices (DMN) and digital therapies (DTx) by Health Insurance is progressing. A specific nomenclature now governs their reimbursement, which represents a decisive lever for their adoption by doctors and patients. Without reimbursement, these tools remain confined to niche users.
The challenge for the coming years lies less in the technology itself than in the health system’s ability to integrate these innovations into existing care pathways, without creating a gap in access between connected patients and those who are not. The digital divide in health remains a blind spot that neither online training nor institutional platforms can sufficiently address.
