Fabien Malbranque becomes CISO of the Health Data Hub

In April 2022, Fabien Malbranque joined the Health Data Hub (HDH) as Head of Information Systems Security (RSSI). The HDH is a public interest group (GIP) created by the law of July 24, 2019, relating to the organization and transformation of the health system. Its purpose is to federate the various French health databases, including the national health data system (SDNS) which constitutes the main database, and other databases covering certain parts of the population. Its purpose is to provide researchers and other actors involved in the design of new health solutions with easy, unified, transparent and secure access to health data, with a view to improving the quality of care and patient support.

The HDH associates 56 stakeholders, mostly from public authorities, including several ministerial departments, health insurance funds, complementary health organizations, research institutes (CNRS, Inserm, CEA, Inria, etc.) , healthcare establishments, associations representing healthcare professionals and users (France Assos Santé), agencies such as the Haute Autorité de Santé as well as professional organizations (Leem, Syntec Numérique, France Digitale, etc.)

Experience in several departments

Due to the particularly sensitive nature of the data concerned, security is a key issue for the GIP. Fabien Malbranque will put nearly 17 years of experience in cybersecurity at the service of the HDH, acquired in particular in various ministries, including those of Justice, Labor and Social Affairs (current Ministry of Solidarity and Health). This familiar with the public sector also spent three years in the private sector at Carrefour, as domain security manager and then manager of the operational security center. Before joining the HDH, he was area IS security manager at the Paris police headquarters. Fabien Malbranque is a graduate of the Compiègne University of Technology (UTC).

Among the subjects on which he should logically be called upon to intervene is the delicate question of the hosting of the HDH, which is currently pending. Remember that the HDH is currently hosted in the Microsoft Azure cloud, a choice that has drawn a lot of criticism, in particular because of the Cloud Act. There was talk of reviewing this choice, but the subject, deemed too sensitive to be dealt with during the election period, was put on hold at the start of the year. Regulatory compliance, sovereignty and cybersecurity will be key requirements for a hosting change.