Regulatory Watch  /  France  /  Proposed regulation
Moderate impactProposed regulationAnnounced

CNIL agenda includes review of draft decrees on automated personal data processing and authorizations for health data studies

The CNIL plenary session agenda for 3 September 2026 lists examinations of draft deliberations on a decree modifying decree n° 2023‑935 for the SISPoPP system, a draft decree on the API‑PNR France system, and authorizations for RCTs, IQVIA Operations France and Kalixia to use automated processing of health data from ESND and PMSI.

Why it matters: The agenda signals upcoming CNIL scrutiny of new automated data processing initiatives affecting law‑enforcement and health research.

Summary generated from the sources below. Check the primary source before relying on it; this is not legal advice.

Sources
Ordre du jour de la séance plénière du 3 septembre 2026
CNIL (France) · primary source · Sep 3, 2026
Details
JurisdictionFrance
RegulatorCommission nationale de l'informatique et des libertés (CNIL)
LawGeneral Data Protection Regulation
StatusAnnounced
PublishedSeptember 3, 2026
Effectivenot stated
OrganisationsRandomized clinical trials (RCTs), IQVIA Operations France, Kalixia, direction générale des Finances publiques
Topicsautomated decision making, ai governance, health, data minimization, purpose limitation, access, privacy
Datapersonal, health, sensitive