France is pulling the plug on Microsoft Azure for its national Health Data Hub. The government has decided to migrate the massive health database to Scaleway, the cloud arm of telecom group Iliad, citing sovereignty concerns over data control. The move represents one of the most significant shifts away from a US hyperscaler in European public sector cloud adoption.

The Health Data Hub (HDH), officially known as the Plateforme des Données de Santé, holds anonymized health data from millions of French citizens. It was launched in 2019 as a central repository to facilitate medical research, AI development, and public health policy. Until now, the platform ran on Microsoft Azure, a decision that drew criticism from privacy advocates and lawmakers who questioned the storage of sensitive health data on a foreign-owned cloud infrastructure.

Sovereignty Takes Center Stage

The French government's decision is rooted in the Cloud au Cœur (Cloud at the Heart) doctrine, which mandates that sensitive data and critical services must be hosted on trusted cloud providers. This doctrine, established in 2021, created a certification framework—SecNumCloud—that requires cloud services to be operated by companies with no exposure to non-European laws, such as the US CLOUD Act. Microsoft Azure, despite its French data centers, could not meet this standard because of its corporate ties to the United States.

Scaleway, on the other hand, is a French company fully owned by Iliad. It has obtained SecNumCloud qualification for its cloud services, making it eligible to host sensitive data. The migration of the Health Data Hub to Scaleway is scheduled to be completed by the end of 2025, according to the French Ministry of Health.

Technical and Operational Challenges

Migrating a petabyte-scale health data platform is no small feat. The Health Data Hub currently holds over 10 petabytes of data, including claims data from the national health insurance system, hospital records, and genomic data. The platform processes thousands of research projects annually, each requiring secure access to anonymized datasets.

Scaleway will need to replicate the performance and scalability of Azure while ensuring compliance with strict health data regulations. The company has been investing heavily in its cloud infrastructure, including building new data centers in France and expanding its services to match hyperscaler capabilities. However, it remains to be seen whether Scaleway can match Azure's advanced AI and machine learning tools, which researchers currently rely on.

Costs and Economic Implications

The migration comes with a price tag. France has allocated €20 million for the transition, covering not only the technical migration but also the adaptation of research tools and retraining of personnel. This is a fraction of the €200 million that the Health Data Hub has cost since its inception, but it underscores the premium placed on sovereignty.

Economically, the move is a boost for the French cloud ecosystem. Scaleway, which competes with OVHcloud and Outscale, stands to gain significant credibility and revenue from hosting one of Europe's most sensitive data platforms. It also sends a signal to other European governments: sovereignty comes with a cost, but it is achievable.

Reactions from Stakeholders

Privacy advocates have largely welcomed the decision. La Quadrature du Net, a French digital rights group, had previously filed complaints about the Health Data Hub's reliance on Azure, arguing that it exposed French health data to US surveillance. The migration, they say, addresses these concerns but does not solve all privacy issues related to data anonymization and access controls.

Researchers, however, have expressed caution. Many have built their workflows around Azure's tools and APIs. The migration could disrupt ongoing studies and require significant rework. The Health Data Hub has promised a phased transition to minimize disruption, but some researchers worry about losing access to advanced analytics capabilities that only hyperscalers currently provide.

Broader European Context

France is not alone in its push for cloud sovereignty. Germany has its own Sovereign Cloud initiative, while the European Union is developing a European Health Data Space. The move by France could accelerate similar decisions across the continent. However, it also highlights the tension between sovereignty and technological competitiveness. European cloud providers, while trusted, often lack the scale and feature set of AWS, Azure, and Google Cloud.

What This Means for Microsoft

For Microsoft, losing the Health Data Hub is a blow to its Azure business in Europe. The company has invested heavily in compliance, offering data localization and contractual guarantees against US access. Yet, the SecNumCloud requirement remains a barrier that Microsoft cannot overcome without restructuring its corporate structure. This may force Microsoft to reconsider its approach to sovereign cloud offerings, potentially through joint ventures or partnerships with local providers.

The Road Ahead

The Health Data Hub migration is a test case for European digital sovereignty. If successful, it could pave the way for other sensitive data platforms—from tax records to social security data—to move to European clouds. If it fails, due to technical issues or cost overruns, it could set back the sovereignty agenda.

For now, the French government is betting on Scaleway. The company has a strong track record with cloud services for French institutions, but hosting a national health data platform is a different ballgame. The next two years will reveal whether a European cloud provider can truly replace a hyperscaler in a mission-critical, data-intensive environment.

Key Takeaways

  • France is moving its Health Data Hub from Microsoft Azure to Scaleway for sovereignty reasons.
  • The migration is driven by the SecNumCloud certification, which Azure cannot obtain due to US ownership.
  • The transition is expected to complete by end of 2025, with a budget of €20 million.
  • Researchers face potential disruptions, but the government promises a phased approach.
  • The move could influence other European countries to pursue similar sovereign cloud strategies.