rgpd-sante.com

What It Is

RGPD Santé is a French health-data protection consultancy founded in 2023. It positions itself as a provider focused on RGPD/GDPR compliance and outsourced DPO services for the healthcare sector. Its target clients include CPTS networks, perinatal networks, MSPs, multidisciplinary medical centers, private clinics, radiology centers, and specialist healthcare organizations. It is not a firewall, EDR, or vulnerability-scanning product in the traditional sense; instead, it provides professional support around compliance governance, DPO responsibilities, and data-breach response for health-data processing.

Core Capabilities

In terms of protection scope, RGPD Santé focuses on compliance protection for sensitive health data, including records of processing activities, AIPD/DPIA, patient or data-subject notices, privacy policies, and procedures for exercising data-subject rights. Outsourced DPO service is its core offering: the founder can be appointed and declared to the CNIL as the client organization’s DPO. For data breaches, its services include incident severity analysis, notification to the CNIL within 72 hours, and, where required, notification of affected individuals.

Deployment, Management, and Integration

Deployment is primarily delivered through consulting and ongoing support. Customers subscribed to the DPO service can use the app.rgpd-sante.com platform, which includes a real-time compliance dashboard, records of processing activities, AIPD risk mapping, subcontractor and DPA management, rights and breach registers, and direct communication with the DPO. This can be useful for healthcare organizations building a day-to-day compliance register. However, the available materials do not disclose any API, integration with healthcare business software, automated security alerts, or SIEM connectivity.

Pricing and Suitability

The official website mentions that the “DPO subscription” includes a dedicated management platform, but it does not publish pricing, plans, payment methods, or service levels. More importantly, its schedule for new clients is currently full, with the next opening expected in Q3 2026, making short-term procurement relatively impractical. Its use cases are clearly oriented toward the French regulatory environment, especially healthcare organizations that need to meet RGPD, the French Data Protection Act, the Public Health Code, and CNIL requirements.

Pros, Cons, and Access from China

Its strengths are strong healthcare-sector specialization, end-to-end coverage of health-data compliance workflows, and the combination of outsourced DPO service with platform-based management. Its drawbacks are the lack of pricing transparency, limited delivery capacity, and no demonstrated technical security product capabilities or international certifications. There is no evidence in the source text regarding access from China, so this remains unknown; payment methods are also undisclosed. If Chinese healthcare organizations need similar capabilities, they should prioritize local providers specializing in data security, the Personal Information Protection Law, Multi-Level Protection Scheme compliance, and medical-data compliance. If they process EU/French patient data, local DPO consultancies or alternatives such as OneTrust and Data Legal Drive may be worth considering.