Health Data Hub: cloud sovereignty and internal state trade-off

On April 23, 2026, France's Health Data Platform announced its migration to a sovereign cloud operated by Scaleway, ending years of controversy over its reliance on Microsoft Azure. This shift reflects a broader evolution in public policy: beyond regulatory compliance, the state is now asserting control over critical digital infrastructure.

Created in 2019, the Health Data Hub was designed to centralize and facilitate the use of data from the French National Health Data System. It covers around 67 million individuals. Public sources do not provide a precise measure of total data volume, but sector analyses often describe it as reaching multiple petabytes, making it one of the largest medico-administrative databases in Europe.

The initial reliance on Microsoft Azure raised sustained concerns. France's data protection authority stated in several opinions that using a provider subject to US law could expose data to requests from foreign authorities. In 2020, the Council of State required additional safeguards, without fully resolving the underlying legal contradiction.

According to Reuters, the 2019 decision did not involve a full competitive tender. This reflects a broader structural dependency: AWS and Microsoft Azure together account for a majority share of the European cloud market, while European providers remain comparatively limited.

The 2026 selection process involved multiple administrations, nine ministries and more than 350 technical criteria. Deployment is expected between late 2026 and early 2027. The contract value has not been disclosed. Based on typical benchmarks for similar public cloud projects, industry estimates suggest costs can reach tens of millions of euros over time, although this figure is not confirmed for this specific case.

The decision fits into a wider European dynamic. Earlier in April, the European Commission awarded a cloud contract worth 180 million euros to several European providers, including Scaleway and OVHcloud. This trend reflects an effort to strengthen domestic capabilities in response to the dominance of US firms.

At the global level, models diverge. The United States relies on dominant private hyperscalers. China has developed a more state-integrated model of digital infrastructure. Europe is pursuing an intermediate path, combining regulation with industrial policy and public procurement.

Within Europe, national approaches differ. Germany has prioritized open-source solutions to reduce software dependency, while Denmark follows a more pragmatic hybrid strategy combining US and European providers. France appears to be moving toward a state-driven hybrid model, where public procurement plays a role in shaping the market.

Interpretations vary across sources. Reuters frames the decision as a sovereignty signal. Politico highlights Europe's technological dependence. French technology media present it as the resolution of a long-standing controversy related to the Cloud Act.

The issue of internal trade-offs remains difficult to document. No official source details internal administrative debates. However, several sector observers suggest that tensions may exist between performance requirements and legal sovereignty concerns, without attributing these views to specific actors in this case.

Potential biases are identifiable. Scaleway directly benefits from the decision. French technology media often emphasize digital sovereignty. Conversely, some healthcare stakeholders stress the importance of performance and available tools.

Uncertainties remain. The exact cost is not public. The migration has yet to be completed at scale. The ability to maintain performance levels comparable to major international platforms will need to be assessed over time. Interoperability with global tools also remains an operational issue.

For the executive, the decision aligns political positioning with operational implementation. It illustrates a shift in the role of the state, which is moving beyond regulation to actively shaping digital infrastructure.

In the short term, success will depend on technical execution and adoption by stakeholders. In the medium term, it will depend on Europe's ability to develop credible alternatives. In any case, this decision sets a precedent in the governance of public digital infrastructure.

FAQ

Why is the Health Data Hub strategic?
It centralizes health data covering most of the French population, making it critical for research and public policy.

What is the main legal issue?
Exposure to extraterritorial laws such as the US Cloud Act, which may allow foreign authorities to access certain data.

What uncertainties remain?
Costs, performance and the success of the migration are not yet fully known.