Hébergeur de Données de Santé (HDS)

Overview


Introduced by the French governmental agency for health, “Agence du Numérique en Santé” (ANS), the HDS (Hébergeur de Données de Santé) certification aims to strengthen the security and protection of personal health data. Achieving this certification demonstrates that AWS provides a framework for technical and governance measures to secure and protect personal health data, governed by French law. The HDS certification validates that AWS ensures data confidentiality, integrity, and availability to its customers and partners. AWS worked with an independent third-party auditor to achieve the certification.

FAQs


  • HDS certification provides the necessary assurance of information security for companies who wish to host the healthcare data of French citizens in the cloud.

  • To be HDS certified, an IT provider must be ISO 27001 certified. This means that the services covered by our ISO 27001 certification are included in the scope of HDS. The AWS services that are in scope for the ISO/IEC 27001:2013 certification can be found on the ISO Certified webpage

  • The HDS certification currently covers the following AWS Regions: Asia Pacific (Hong Kong), Asia Pacific (Hyderabad), Asia Pacific (Jakarta), Asia Pacific (Mumbai), Asia Pacific (Osaka), Asia Pacific (Seoul), Asia Pacific (Singapore), Asia Pacific (Sydney), Asia Pacific (Tokyo), Canada (Central), Europe (Frankfurt), Europe (Ireland), Europe (London), Europe (Milan), Europe (Paris), Europe (Stockholm), Europe (Zurich), Middle East (UAE), Israel (Tel Aviv), US East (N. Virginia), US East (Ohio), US West (N. California), US West (Oregon), South America (São Paulo).

  • Yes. AWS' HDS certification can be downloaded from AWS Artifact. The HDS standard can be found at the ANS website here.

  • AWS achieved HDS certification in the following areas:

    A "physical infrastructure host" certificate for the provision of physical hosting and physical infrastructure activities

    1. Provision and maintenance in operational condition of physical sites to host the physical infrastructure of the information system used for health data processing.
    2. Provision and maintenance in operational condition of the physical infrastructure of the information system used for health data processing

    A "hosting provider" certificate for virtual infrastructure provisioning, software platform provisioning, administration / operations, and outsourced backup activities

    1. Provision and maintenance of the information system application hosting platform
    2. Provision and maintenance of the virtual infrastructure of the information system used for health data processing
    3. Administration and operation of the information system containing health data
    4. Health data backup
  • As per the Shared Responsibility Model, AWS' HDS certification demonstrates the "Security of the Cloud," enabling customers to focus their resources on items related to "Security in the Cloud" in connection with their HDS certification process.

  • As per the Shared Responsibility Model, it is our customers’ responsibility to evaluate their own compliance requirements. Please review the ANS website for more details.

Have Questions? Connect with an AWS Business Representative
Exploring compliance roles?
Apply today »
Want AWS Compliance updates?
Follow us on Twitter »