HDS

The French Public Health Code (Article L.1111-8) requires that service providers which host certain types of personal health information (PHI) receive HDS (Hébergeur de Données de Santé) certification. Introduced by the French governmental agency for health, ASIP Santé (Agence Française de la Santé Numérique), HDS provides a framework to strengthen the security and protection of PHI.

To achieve HDS certification, providers must achieve a detailed list of activities, referred to as “perimeters.” These requirements apply no matter where the data is stored. Google’s certification, which covers both Google Cloud and Google Workspace, covers all of the perimeters:

1. The provision and maintenance in operational condition of physical sites for hosting the physical infrastructure of the information system used for the processing of health data.
2. The provision and maintenance in operational condition of the physical infrastructure of the information system used for the processing of health data.
3. The provision and maintenance in operational condition of the application platform hosting the information system.
4. The provision and maintenance in operational condition of the virtual infrastructure of the information system used for the processing of health data.
5. The administration and operation of the information system containing the health data.
6. Backup of health data.

Google Cloud is now listed on the ASIP’s website as an HDS-certified host, meaning that companies that work with and in the French healthcare industry and that comply with France's General Security Policy for Health Information Systems (PGSSI-S) can confidently exchange, store data, and run workloads pertaining to French PHI on Google Cloud  and Google Workspace.

Enhanced and Premium Support customers, who are subject to HDS requirements, can submit a technical support case in French through the Google Cloud console.