CNIL Updates Two Standards For Health Research (MR-001 and MR-003)

The French data protection authority (CNIL) has updated its Reference Methodologies MR-001 and MR-003 for health research, introducing joint controllership rules and clarifying GDPR obligations. These changes affect how organizations in the health sector must structure data processing agreements and compliance frameworks.