France Moves Millions of Health Records to Sovereign Cloud

France just took a bold step toward protecting its citizens' most sensitive information while building a more independent digital future.

The country announced it's moving its massive Health Data Hub from Microsoft's cloud to Scaleway, a French company owned by telecommunications group Iliad. The database contains health records for tens of millions of French citizens and serves as a vital resource for medical researchers studying long-term health trends.

The decision comes after years of concern from French regulators. When Microsoft was first chosen to host the platform in 2019, France's data protection authority quickly raised red flags about privacy and security.

The core issue? Even if data sits on servers in France, US authorities could still request access under American law if a US company controls it. For highly sensitive medical records, that created an unacceptable vulnerability.

France addressed the problem head-on by passing a law in 2024 requiring "sovereign-guaranteed" hosting for sensitive government data. The migration to Scaleway, set to complete by late 2026 or early 2027, fulfills that promise.

Hela Ghariani, director of the Health Data Platform, called the move "an important step in accelerating the use of health data-driven research and innovation in France and across Europe." The new system maintains the highest security standards while giving researchers the tools they need to advance medical breakthroughs.

The Ripple Effect

France isn't alone in reclaiming digital independence. Germany's state of Schleswig-Holstein is moving 30,000 government computers away from Microsoft tools. Denmark is transitioning parts of its public administration to open-source software. The European Commission recently awarded a €180 million cloud contract to a consortium that includes Scaleway and other European providers.

This shift represents more than just changing vendors. European governments are building infrastructure that protects citizen data, strengthens local tech companies, and reduces dependency on foreign corporations for critical services.

The migration proves that countries can modernize their digital systems while keeping control of their most valuable asset: their citizens' private information.