Oct. 22, 2020

Interviews

Full reference: Frison-Roche, M.-A., "Health Data Hub est un coup de maître du Conseil d'Etat", interview realized by Olivia Dufour for Actu-juridiques, Lextenso, 22nd of October 2020

Read the news of 19th of October 2020 of the Newsletter MAFR - Law, Compliance, Regulation on which relies this interview: Conditions for the legality of a platform managed by an American company hosting European health data​: French Conseil d'Etat decision 

To go further, on the question of Compliance Law concerning Health Data Protection, read the news of 25th of August 2020: The always in expansion "Right to be Forgotten"​: a legitimate Oxymore in Compliance Law built on Information. Example of​ Cancer Survivors Protection 

Oct. 19, 2020

Publications : Newsletter MAFR - Law, Compliance, Regulation

Full reference: Frison-Roche, M.-A., Conditions for the legality of a platform managed by an American company hosting European health data​: French Conseil d'Etat decisionNewsletter MAFR - Law, Compliance, Regulation, 19th of October 2020

Read by freely subscribing the other news of the Newsletter MAFR - Law, Compliance, Regulation

___

 

News Summary: In its ordinance of 13th of October 2020, Conseil national du logiciel libre (called Health Data Hub), the Conseil d'Etat (French Administrative Supreme Court) has determined the legal rules governing the possibility to give the management of sensitive data on a platform to a non-europeans firm, through the specific case of the decree and of the contract by which the management of the platform centralizing health data to fight against Covid-19 has been given to the Irish subsidiary of an American firm, Microsoft. 

The Conseil d'Etat used firstly CJEU case law, especially the decision of 16th of July 2020, called Schrems 2, in the light of which it was interpreted and French Law and the contract linking GIP and

The Conseil d'Etat concluded that it was not possible to transfer this data to United-Sates, that the contract could be only interpreted like this and that decree and contract's modifications secured this. But it observed that the risk of obtention by American public authorities was remaining. 

Because public order requires the maintenance of this platform and that it does not exist for the moment other technical solution, the Conseil d'Etat maintained the principle of its management by Microsoft, until a European operator is found. During this, the control by the CNIL (French Data Regulator), whose the observations has been taken into consideration, will be operated. 

We can retain three lessons from this great decision:

  • There is a perfect continuum between Ex Ante and Ex Post, because by a referred, the Conseil d'Etat succeed in obtaining an update of the decree, a modification of the contractual clauses by Microsoft and of the words of the Minister in order to, as soon as possible, the platform is managed by an European operator. Thus, because it is Compliance Law, the relevant time of the judge is the future. 
  • The Conseil d'Etat put the protection of people at the heart of its reasoning, what is compliant to the definition of Compliance Law. It succeeded to solve the dilemma: either protecting people thanks to the person to fight against the virus, or protecting people by preventing the centralization of data and their captation by American public authorities. Through a "political" decision, that is an action for the future, the Conseil found a provisional solution to protect people against the disease and against the dispossession of their data, requiring that an European solution is found. 
  • The Conseil d'Etat emphasized the Court of Justice of The European Union as the alpha and omega of Compliance Law. By interpreting the contract between a GIP (Public interest Group) and an Irish subsidy of an American group only with regards to the case law of the Court of Justice of European Union, the Conseil d'Etat shows that sovereign Europe of Data can be built. And that courts are at the heart of this. 

___________

 

Read the interview given on this Ordinance Health Data Hub

 

To go further about the question of Compliance Law concerning health data protection, read the news of 25th of August 2020: The always in expansion "Right to be Forgotten"​: a legitimate Oxymore in Compliance Law built on Information. Example of​ Cancer Survivors Protection 

 

April 26, 2018

Thesaurus : 03. Conseil d'Etat

Oct. 20, 2017

Thesaurus : 01. Conseil constitutionnel

June 22, 2017

Thesaurus : Doctrine

Référence : Broussolle, Y., Les principales dispositions de l'ordonnance du 9 mars 2017 relative aux actions en dommages et intérêts du fait des pratiques anticoncurrentielles, Petite affiche, juin 2017, n°124, pp. 7-11.

 

Les étudiants de Sciences po peuvent lire l'article via le drive dans le dossier "MAFR - Régulation"

Lire l'Ordonnance ici commentée.

 

 

 

 

April 17, 2014

Publications

L'essentiel pour qu'une entreprise et/ou une place puissent se développer tient à ce qu'elle puisse anticiper.

Parce que le sujet porte sur le juge et le régulateur, et non pas sur toutes les sources du droit, ce qui mènerait sinon à traiter du thème de la sécurité juridique, il convient de déterminer ce que les entreprises sont en droit d'attendre d'un juge ou d'un régulateur.

Une entreprise est en train d'attendre de ceux-ci qu'ils ne soient pas "discrétionnaires", car ils n'ont pas de légitimité à l'être et l'effet de surprise est nuisible à l'économie.

Pour éviter des marges excessives de discrétion, il est inutile de fait de contrôler le juge, car il est lui-même le contrôleur et l'on s'épuise à chercher le gardien du gardien.

Le seul moyen est l'observation par l'autorité de régulation et par les juridictions d'une cohérence de principes auxquels elles se tiennent.

Dans le vocabulaire nord-américain, cela est désigné comme la "doctrine" des administrations et des cours.

Ainsi, la compétitivité de l'économie française sera favorisée par les régulateurs et par les juges, non pas parce qu'ils seraient plus doux, cléments et libéraux, mais parce qu'ils se tiendraient à une doctrine, laquelle réduiraient leur marge de discrétion, qui est la pire des choses pour la sécurité des investissements et de l'action vers le futur, définition même de l'entreprise.

June 4, 2013

Thesaurus : Doctrine

 

Référence complète : Conseil d'État, Le droit souple, Étude Annuelle 2013, La documentation française, 2013, 294 p.

 

Lire la 4ième de couverture.
 

Lire l'avant-propos.


Lire la table des matières.

 

Oct. 10, 1998

Thesaurus : Doctrine

July 10, 1991

Thesaurus : Doctrine

Référence complète : Zénati, F., La jurisprudence, coll. " Méthodes du droit" , Éditions Dalloz, 1991, 282 p.

 

Consulter la table des matières.

Lire l'introduction.