Back to blog
CNILcompliancehealthcare

CNIL priority sectors 2026: healthcare, finance, justice in focus

Published on 2026-04-025 min readCleanIssue

> TL;DR: CNIL targets healthcare, finance and justice for 2026 controls. How to prepare.

Sectors in focus

CNIL's priority sectors for 2025-2026: healthcare, finance, justice. Exactly the sectors we audit.

Why these sectors

  • Healthcare: Cegedim Santé (15.8M records), Viamedis/Almerys (33M people)
  • Finance: FREE (24M IBANs exposed)
  • Justice: attorney-client privilege data. Zero tolerance.
  • The audit report as a shield

    In case of CNIL inspection, a recent audit report demonstrating diligence is your best protection.

    Key Takeaways

  • Identify and test your exposed attack surfaces before a third party does.
  • Client-side security controls never replace server-side validation.
  • Regular audits are more effective than one-time checks — vulnerabilities appear with every deployment.
  • Building HR, payroll, or recruiting software? CleanIssue performs security audits for HR SaaS in real-world conditions, no source code access needed. For a first read of your exposure, start with an external review of your application.

    Sources

    Written by CleanIssue
    Reviewed on 2026-04-02

    Editorial analysis based on official vendor, project, and regulator documentation.

    Related services

    If this topic maps to a real risk in your stack, these are the most relevant CleanIssue audits.

    Need an external review of your HR SaaS?

    Share your product, stack, and client context. We will come back with the right review scope.

    Discuss your audit