Medical Confidentiality in France: Scope, Rules and Exceptions

In France, medical confidentiality is a fundamental pillar of the relationship of trust between a patient and their doctor, but it often remains surrounded by mystery and misconceptions. Whether you are a French citizen or a foreign resident discovering our healthcare system, understanding the scope of this protection is essential to assert your rights. This duty of absolute discretion, far from being a simple ethical code, is a strict legal obligation whose violation is heavily sanctioned by French law. This reference article breaks down the scope of medical confidentiality, its legal exceptions, and the practical steps you can take to enforce it.

---

1. Substantive Rules: What is Medical Confidentiality in French Law?

Medical confidentiality is not a privilege granted to the doctor, but a fundamental right guaranteed to the patient. It aims to protect the intimacy of private life and to ensure that everyone can seek medical care with complete confidence, without fear of having their personal information disclosed.

The Legal Framework and Reference Texts

Medical confidentiality is governed by several major texts of French law:

• *Article L. 1110-4 of the Code de la santé publique (French Public Health Code)*: It establishes the general principle that "any person cared for by a professional, an institution, a health network, or any other body participating in prevention and care has the right to respect for their private life and the confidentiality of information concerning them."
• *Article 226-13 of the Code pénal (French Criminal Code)*: It punishes the violation of professional secrecy.
• *Article 4 of the Code de déontologie médicale (French Code of Medical Ethics)* (codified in Article R. 4127-4 of the Public Health Code): It specifies that secrecy covers everything that has come to the doctor's knowledge in the exercise of their profession.

The Scope of Secrecy: What Does It Contain?

Contrary to popular belief, medical confidentiality is not limited to diagnoses or serious illnesses. It encompasses 100% of the information concerning the patient, whether it was shared by the patient themselves, or discovered, deduced, or observed by the healthcare professional.

Secrecy thus covers:

• The very fact that a person consults a doctor or is hospitalised.
• The patient's statements about their private, family, or professional life.
• Diagnoses, clinical examinations, laboratory results, and X-rays.
• Prescriptions for medication and treatments followed.
• Conversations overheard in the office or hospital.

Who is Bound by Medical Confidentiality?

Secrecy is imposed on all healthcare professionals (doctors, surgeons, dentists, midwives, nurses, pharmacists, physiotherapists).

Furthermore, it extends by a "rebound effect" to all administrative and technical staff of healthcare establishments (medical secretaries, hospital directors, receptionists, hospital IT specialists) who have access to patient files in the course of their duties.

---

2. Legal Exceptions to Medical Confidentiality

Medical confidentiality is the rule, but there are derogations strictly framed by law. These exceptions respond to imperatives of public health, the protection of vulnerable persons, or justice.

Mandatory Derogations (the law requires speaking out)

In certain specific cases, the healthcare professional has a legal obligation to transmit information, under penalty of being prosecuted themselves:

• Declarations of birth and death (Articles 56 and 78 of the Code civil / French Civil Code).
• Mandatory reportable diseases (maladies à déclaration obligatoire or MDO): There is a list of 36 infectious diseases (such as tuberculosis, HIV, rabies, or certain hemorrhagic fevers) that must be reported anonymously to the Agence Régionale de Santé (ARS / Regional Health Agency) for health security reasons.
• Certificates for involuntary psychiatric admission in the event of danger to the patient or to others.

Authorised Derogations (the law permits speaking out)

In other situations, the law lifts the ban on speaking out to protect people in danger. Article 226-14 of the Criminal Code authorises the doctor to report:

• Abuse or deprivation observed on a minor under 18 years of age or on a vulnerable person (due to age, illness, or disability).
• Immediate danger: The doctor may report to the procureur de la République (public prosecutor) the fact that a person possesses a weapon while presenting a state of danger to themselves or to others.
• Domestic violence: Since the law of 30 July 2020, a doctor can report violence within a couple to the prosecutor if they believe that the victim's life is in immediate danger and that they are under the control and influence of their abuser, even without the victim's consent (the doctor must, however, strive to obtain their consent or, failing that, inform them of the report).

Sharing Information Within the Care Team

To ensure continuity of care, the law authorises the sharing of medical information between several professionals. Two cases are distinguished:

1. Within the same care team (e.g., in the same hospital): Information is presumed to be shared. The patient must be informed of this, and they can object to it at any time.

2. Between professionals who are not part of the same team (e.g., between a private general practitioner and an independent physiotherapist): Sharing information requires the patient's prior express consent.

---

3. Practical Steps: How to Access Your File or Take Action in Case of Violation?

If you wish to obtain your medical information or if you believe that your medical confidentiality has been violated, here are the step-by-step procedures to follow.

Procedure 1: Requesting Access to Your Medical File

Under the "Kouchner" law of 4 March 2002, every patient has a right of direct access to their medical file.

• Step 1: Write the request. Write a letter sent by lettre recommandée avec accusé de réception (LRAR / registered mail with acknowledgement of receipt) addressed to the director of the healthcare establishment or directly to the private doctor. Attach a copy of your proof of identity.
• Step 2: Choose the method of consultation. Specify whether you wish to consult the file free of charge on-site (with the possibility of obtaining copies for a fee) or receive the copies directly at your home (the postage and copying costs, of the order of a few cents per page, remain your responsibility).
• Step 3: Respect the response deadlines. The establishment or professional has a legal deadline of 8 days to respond to you if the care dates back less than 5 years. This deadline is extended to 2 months if the care dates back more than 5 years.

Procedure 2: Acting in the Event of a Violation of Medical Confidentiality

If a healthcare professional has disclosed information about you without your consent, you have three non-exclusive avenues of recourse.

• Step 1: Disciplinary recourse (Professional Order). You can file a complaint before the Conseil départemental de l'Ordre des médecins (Departmental Council of the Medical Order, or the relevant professional order) by registered letter. A mandatory conciliation phase will be organised. If it fails, the case is brought before the disciplinary chamber, which can pronounce sanctions ranging from a simple warning to permanent disbarment.
• Step 2: Criminal recourse. You can file a complaint at the police station, the gendarmerie (national police), or directly by mail addressed to the Procureur de la République of the competent Tribunal judiciaire (Judicial Court).
• Step 3: Civil or administrative recourse. You can seize the Tribunal judiciaire (against a private doctor) or the Tribunal administratif (Administrative Court, against a public hospital) to engage the liability of the professional or the establishment and obtain damages in compensation for the harm suffered.

---

4. Deadlines, Amounts and Key Figures to Remember

To assert your rights effectively, keep these essential figures and deadlines of French law in mind:

• 1 year of imprisonment and a €15,000 fine: These are the maximum penalties faced by any professional who violates medical confidentiality (Article 226-13 of the Criminal Code).
• 8 days: The maximum period for a healthcare establishment to transmit your medical file to you (for care of less than 5 years).
• 2 months: The transmission period if the medical care dates back more than 5 years.
• 20 years: This is the minimum retention period for a medical file by a healthcare establishment from the date of the last stay or the last consultation of the patient.
• 10 years: The limitation period for initiating a civil or administrative liability action against a healthcare professional or establishment following personal injury (starting from the consolidation of the damage).
• 6 years: The limitation period for initiating criminal proceedings for violation of professional secrecy from the day the offence was committed.

---

5. Concrete Examples

To better understand the practical application of these rules, here are two everyday situations.

Example 1: Medical Confidentiality vs. the Employer and Occupational Medicine

> Example: Lucas is an employee in a logistics company and earns a net salary of €2,100 per month. Following a severe depression, he is placed on sick leave for 3 months. His employer, suspicious, calls Lucas's treating doctor to find out the exact reason for the leave in order to verify if it is justified.

>

> The rule: The treating doctor is absolutely forbidden from revealing Lucas's condition to the employer. If they did, they would risk a €15,000 fine and a suspension of practice by the Ordre des médecins*.

> The role of the occupational doctor: Lucas must undergo a return-to-work medical visit. The médecin du travail (occupational doctor), who is also bound by medical confidentiality, will only assess Lucas's physical fitness to return to his post. They will transmit the mention "fit" (apte) or "unfit" (inapte*) to the employer, without ever revealing Lucas's psychiatric pathology or treatment.

Example 2: Medical Confidentiality After the Death of a Loved One

> Example: Sarah wishes to contest the validity of her deceased father's will, believing that he was no longer in possession of his mental faculties when he bequeathed his house worth €250,000 to a third party. She requests access to his entire medical file from the psychiatric hospital where he resided.

>

> * The rule: Medical confidentiality does not end with the death of the patient. The hospital must refuse global access to the file.

> The exception: As an ayant droit* (beneficiary/successor), Sarah can obtain only the parts of the file necessary to achieve one of the three motives provided by law: to know the causes of death, to defend the memory of the deceased, or to assert her rights (which is the case here to contest the will). Sarah must justify her request in writing, and the hospital will only transmit to her the documents strictly linked to the mental state of the deceased at the time the will was drafted, to the exclusion of the rest.

---

6. Mistakes to Avoid

• Believing that the family has an automatic right of access: Unless the patient is a minor or under guardianship (tutelle), a doctor does not have the right to disclose medical information to relatives (spouse, parents, adult children) without the patient's express consent, even if the situation is deemed urgent by the family.
• *Confusing "trusted person" (personne de confiance) and "person to notify" (personne à prévenir):* The person to notify is simply contacted in the event of an administrative emergency. Only the "trusted person" (designated in writing) can receive medical information if you are unable to express your will.
• Thinking that medical confidentiality is lifted for insurers or bankers: When applying for a mortgage (for example, for a loan of €180,000), the insurer may ask you to fill out a health questionnaire. You are free to answer it, but the doctor has no right to transmit your data directly to the insurer. It is up to you to decide what information you share.
• Neglecting the security of your digital data: Never send medical analyses or prescriptions by simple, unsecured email or via consumer instant messaging apps to your doctor. Use secure channels or the "Mon Espace Santé" (My Health Space) portal set up by the French state.

---

7. FAQ (Frequently Asked Questions)

Can a doctor refuse to give me my medical file?

No, a doctor or a healthcare establishment cannot refuse you access to your medical file. This is an absolute right guaranteed by Article L. 1111-7 of the Public Health Code. In the event of a refusal or silence beyond the period of 8 days (or 2 months), you can seize the Commission d'accès aux documents administratifs (CADA / Commission for Access to Administrative Documents) if it is a public hospital, or the Conseil de l'Ordre if it is a private doctor.

Does medical confidentiality apply to minors regarding their parents?

In principle, holders of parental authority have access to the medical information of their minor child. However, by exception (Article L. 1111-5 of the Public Health Code), the minor can demand confidentiality regarding their treatments or prescriptions (notably concerning contraception, voluntary termination of pregnancy - IVG, or the treatment of sexually transmitted infections). In this case, the doctor must try to convince the minor to involve their parents, but if the minor maintains their refusal, the doctor must respect the secret and treat the minor, who must then be accompanied by an adult of their choice.

Can an employer demand to know the reason for my sick leave?

Absolutely not. The employer is a third party to medical confidentiality. The copy of the sick leave certificate intended for the employer (copy 3) does not contain any medical mention or diagnosis. Only copies 1 and 2, sent to the Caisse primaire d'assurance maladie (CPAM / local health insurance fund), contain confidential medical data intended for the social security medical advisor.

Can a doctor testify in court about one of their patients?

In principle, no. A doctor summoned as a witness before a court must appear, but they must take an oath and declare that they cannot answer questions that would violate professional secrecy. It is up to the doctor, in good conscience, to determine whether they can speak without violating secrecy. If they choose to speak outside the cases of legal exceptions (such as the protection of minors), they expose themselves to criminal sanctions, even if it is the judge asking the question.

---

Summary

• Medical confidentiality is absolute and general: it covers all information confided, observed, or deduced by the healthcare professional.
• The violation of medical confidentiality is a criminal offence punished by 1 year in prison and a €15,000 fine.
• Exceptions to secrecy are strictly limited by law (protection of minors, domestic violence under coercive control, mandatory reportable diseases).
• Every patient has a right of direct access to their medical file within a period of 8 days (or 2 months for files older than 5 years).
• Medical confidentiality remains applicable after the death of the patient, except for very specific and justified requests from beneficiaries.

Legal information for guidance only, not personalised legal advice. For your specific situation, ask your question free of charge on AvocatAI — answers based on French law, in your language.