France Moves Health Data Hub from Microsoft to Scaleway to Ensure Sovereignty

↑
↑

  //science-technology.news-articles.net/content/2 .. microsoft-to-scaleway-to-ensure-sovereignty.html
  Published in Science and Technology on Thursday, April 23rd 2026 at 11:49 GMT by reuters.com
      Locale: FRANCE

The Push for Repatriation

For several years, France's Health Data Hub--a massive repository designed to centralize health records to accelerate medical research and improve public health policy--has operated on infrastructure provided by the American tech giant Microsoft. However, the decision to "repatriate" this data suggests a growing intolerance for the legal and jurisdictional ambiguities associated with US-based cloud providers.

Central to this conflict is the tension between the European Union's General Data Protection Regulation (GDPR) and the United States' Cloud Act. The Cloud Act grants US law enforcement and intelligence agencies the authority to request data stored by US companies, regardless of whether that data is physically located on servers within the United States or abroad. For a state as protective of its citizens' privacy as France, the prospect of sensitive medical records falling under the potential jurisdiction of a foreign power became a strategic liability.

The Role of Scaleway and Iliad

By partnering with Scaleway, France is betting on a domestic alternative. Scaleway, under the umbrella of the Iliad Group, provides a cloud environment that is not subject to the same extraterritorial laws as its American counterparts. This transition is not merely a change of vendors but a structural realignment aimed at ensuring that the keys to the kingdom--the raw data of millions of French citizens--remain within French and European legal boundaries.

Broader Implications for the European Union

This move reflects a broader trend across the EU known as "strategic autonomy." For years, European governments have relied on the "hyperscalers" (Amazon Web Services, Microsoft Azure, and Google Cloud) due to their unmatched scale and technical capabilities. However, the reliance on a handful of US companies has created a perceived dependency that threatens both economic competitiveness and national security.

France's decision serves as a bellwether for other EU member states. As the European Health Data Space (EHDS) continues to evolve, the pressure to utilize "sovereign clouds" is likely to increase. The transition of the HDH demonstrates that France is willing to undertake the complex technical challenge of migrating vast amounts of sensitive data to avoid the legal risks associated with non-EU providers.

Key Details of the Transition

• Primary Objective: To repatriate sensitive health data to a domestic provider to ensure full digital sovereignty.
• Provider Shift: The infrastructure is moving from Microsoft Azure to Scaleway (Iliad Group).
• Legal Driver: Concerns over the US Cloud Act and its conflict with EU data privacy standards (GDPR).
• Nature of the Data: The Health Data Hub contains comprehensive medical records intended for large-scale research and policy optimization.
• Strategic Context: This is part of a wider French and European movement toward "strategic autonomy" in the digital sector.

Technical and Political Challenges

While the political motivation is clear, the technical execution of such a migration is daunting. Moving a centralized health hub involves transferring petabytes of data while ensuring zero downtime for critical research projects and maintaining rigorous security protocols to prevent leaks during the transition.

Politically, the move signals a hardening stance against the dominance of US Big Tech. While France continues to maintain a diplomatic and economic relationship with the United States, the decoupling of critical state infrastructure from US control suggests that for the most sensitive sectors--health, defense, and intelligence--sovereignty now outweighs the convenience of integrated global platforms.