Santé publique France is France’s national public health agency. A public institution under the authority of the Minister of Health, established by Order No. 2016-246 of April 15, 2016, it works to promote public health. As a scientific and expert agency in the health sector, its missions include:

1. Epidemiological observation and surveillance of the health status of the population;
2. Monitoring health risks threatening the population;
3. Promoting health and reducing health risks;
4. Developing prevention and health education;
5. Preparation for and response to health threats, alerts, and crises;
6. Issuing health alerts.

The agency is organized into scientific and cross-functional divisions, as well as divisions providing operational support.
Its work program, approved by its Board of Directors, is structured around five priority areas: health determinants, populations, diseases, interventions and regions, and infrastructure.

Executive Management – Quality and Risk Management Unit

Responsibilities

The apprentice will assist the DPO with all GDPR compliance tasks within Santé publique France. This apprenticeship will focus primarily on the processing of personal health data. During this apprenticeship, the apprentice will apply (or acquire) knowledge in the following areas: 

• Personal data protection law (GDPR, Law No. 78-17 on “Data Processing and Civil Liberties,” EDPB recommendations, etc.); 
• Health data law: medical confidentiality (Public Health Code), National Health Data System (Public Health Code), health data hosting providers (Public Health Code), processing of health data (Articles 65 et seq. of Law 78-17 “Data Protection Act,” Reference methodology, EDS framework), Regulation on the European Health Data Space, etc.; 
• Research involving human subjects (Public Health Code); 
• Open data: Code on Relations Between the Public and the Administration;
• Statistical confidentiality law: Law No. 51-711 of June 7, 1951, on obligations, coordination, and confidentiality in statistics. 

This training will provide an introduction to the environment of health agencies, interactions with the Ministry of Health, the Regional Health Agencies (ARS), and the agency’s scientific and institutional partners (CNR, CPIAS, Inserm, Inca, Anses, ECDC, healthcare professionals and institutions, etc.), as well as the specific field of health surveillance and alert management.

Activities

Your main responsibilities will include:

• Updating the data processing registry;
• Assessing and documenting the compliance of personal data processing: reviewing scientific protocols and supporting the design of processing operations, assisting with the development and evaluation of data protection impact assessments (DPIAs), drafting contracts (between data controllers; for data processing; regarding joint responsibility), and preparing information documents for data subjects;
• Internal procedures and staff awareness;
• Management of requests by scientific teams for access to data produced by the agency and the release of Santé publique France’s outputs as open data (assessment of data anonymity).