On March 11, the French data protection authority, CNIL (Commission nationale de l'informatique et des libertés), approved a project known as Darwin EU, which facilitates the transfer of health information from the French national health insurance fund (Cnam) to Microsoft.

Approximately 10 million French individuals will be randomly selected to have their health data migrated to the U.S.-based tech giant's cloud infrastructure.

This initiative is coordinated by the European Medicines Agency and implemented in France by the public interest group known as the Health Data Hub (HDH).

The project aims to create an extensive dataset that will help determine the prevalence and incidence of medication and vaccine use across France, employing standardized methodologies for analysis.

The CNIL's approval allows the HDH to select a statistically representative sample of individuals based on age, gender, and geographical location from the French National Health Data System, which primarily sources data from the Cnam.

The underlying intention of the project is to enhance the understanding of healthcare trends and outcomes.

However, the choice of Microsoft as the data host has raised concerns regarding data privacy and security.

Critics assert that the storage of sensitive health data in a cloud environment managed by a U.S. corporation could compromise the confidentiality of personal health information, placing it under the jurisdiction of U.S. laws.

Activists and legal experts are currently formulating an appeal to the French Conseil d'État, urging various stakeholders—including unions and civil associations—to support their efforts.

As the project advances, the implications of utilizing foreign entities for managing health data continue to be scrutinized, highlighting the tensions between digital innovation and data protection in the realm of personal health information.