A three-day congress in Paris on health data governance, the European Health Data Space and responsible AI, bringing together data protection officers, regulators, chief data officers and health providers around a dedicated AI and synthetic data theme.
The European Health Data Protection Congress, known as EHDPC, is an annual congress on how health data is governed, shared and protected in Europe. The 2026 edition is the fourth, after editions in October 2023, 2024 and 2025, and runs 14 to 16 October 2026 in Paris. The organiser describes it as an independent forum, and its stated question is how Europe can unlock the value of health data while keeping trust, privacy, security and regulatory compliance. It is a policy and compliance congress, not a product show: the programme is built by and for data protection officers, regulators, lawyers and chief data officers, with AI and synthetic data treated as something to be governed.
The congress runs 14 to 16 October 2026. Days one and two are held at the Renaissance Paris Nobel Tour Eiffel Hotel, 55 to 57 Avenue Raymond Poincaré, 75116 Paris, France, in the Trocadéro district of the 16th arrondissement. Day three (16 October) is listed at Onepoint, 29 rue des Sablons, 75116 Paris. Day one opens with badge collection and lunch at 12:00 and the congress ends at 13:30 on 16 October. A third-party event listing places the congress at Place du Trocadéro; the organiser's own programme names the hotel, and this fiche follows the programme.
The organiser is EHDPC. The official site does not name a legal entity; its organisation committee is shown only as images. The programme gives the roles of two people: Pierre-Yves Lastic, Secretary General of the European Federation of Data Protection Officers (EFDPO) and EHDPC Chairman, and Dipak Kalra, President of the European Institute for Innovation through Health Data (i~HD) and EHDPC co-chair. EHDPC also runs the Journal of Health Data Protection, whose editorial board includes Ahmed Alhatlan of the Gulf Center for Disease Prevention and Control, and a one-year subscription comes with registration. A third-party listing says earlier editions were run in cooperation with EFDPO (unverifiable information).
Attendance for 2026 is not publicly disclosed, and no past edition on the official site carries a headcount. The organiser's stated audience is regulators, healthcare providers, pharmaceutical companies, research institutions, technology leaders, data protection officers, chief data officers, legal experts and policy-makers. Its "who should attend" list adds privacy and compliance officers, hospitals and university hospitals, medical device manufacturers, health data access bodies, EHDS implementation project managers and AI governance and risk professionals. Third-party listings of the 2025 edition mention roughly 200 experts (unverifiable information); no audited figure exists.
The programme on the official site names the speakers below, with the note that sessions, timings and speakers may change. This is the published roster, 71 named people by our count, grouped by day.
Day one, Wednesday 14 October:
Day two, Thursday 15 October:
Day three, Friday 16 October:
Day three moves to a second site, Onepoint on rue des Sablons, and the congress runs three days, 14 to 16 October 2026, as in 2025 (15 to 17 October), against two days in 2023 (24 to 25 October) and 2024 (16 to 17 October), per the official past-editions page. The programme adds a Digital Omnibus panel, a Biotech Act panel, a regulatory sandbox plenary, an EHDS readiness closing panel and an OECD closing keynote. The 2026 programme leans on the EDPB Guidelines 1/2026 on scientific research for its opening plenary. A privacy notice on the site still describes an earlier edition and gives October 2024 dates; it was not updated for 2026.
The theme is "Protecting Health Data. Enabling Innovation. Building Trust." Day one, themed on the new European health data rules, opens with a plenary titled "Revolution or evolution in health data protection?" on the EDPB scientific research guidelines, then parallel panels on the Biotech Act and on the Digital Omnibus, oral communications, and a panel on recording consultations with ambient scribes. Day two, "Innovation, risk and operational challenges", has a plenary on regulatory data protection sandboxes, eight workshops in four parallel slots (relative identifiability, connected glasses, tokenisation, cybersecurity and NIS 2, genomic data and biobanks, neuroprivacy, medical digital twins and synthetic data, and data protection for medical devices) and an industry plenary on balancing privacy regulation and innovation. Day three, "From regulation to implementation", has an EHDS plenary from the data protection officer's view, a closing panel on becoming EHDS ready, and a closing keynote from the OECD. The organiser's six core topics are legal and regulatory frameworks, health data use, cybersecurity, AI and synthetic data, privacy risk management and EHDS in practice. Times are Paris time and the programme is subject to change.
The programme uses plenaries (opening, morning, industry, strategic and closing), parallel panels where attendees choose one room, 10-minute oral communications selected from the call for abstracts, one-hour parallel workshops (two of them round tables, on connected glasses and on digital twins), a keynote, breakfast and lunch networking, a cocktail reception on day one and a congress dinner on day two. The opening plenary sessions combine introductory presentations (30 minutes) with a 45-minute panel. Posters are offered as a choice on the abstract form; the programme lists no poster session.
Day one ends with a cocktail reception at Restaurant Verrière, 19:00 to 20:30, and then a Journal of Health Data Protection editorial dinner by invitation only at 20:30. On day two a paid congress dinner runs 19:00 to 23:00 at Onepoint, 14 avenue d'Eylau, 75116 Paris, five minutes' walk from the hotel; the registration page sells a dinner option dated 15 October at 120 euros after 30 August 2026 (95 euros before), booked as an add-on, which matches this dinner. Networking breakfasts run on days two and three and a networking lunch on days one and two.
The standard attendee ticket costs 795 euros since 30 August 2026, up from 595 euros before that date. A continuing-education rate, limited to French participants who send a letter from an employer or training body, costs 1,260 euros (960 euros before 30 August). A student or media ticket, which needs a valid student card or press card and seven days of validation, costs 360 euros (210 euros before). The dinner add-on costs 120 euros (95 euros before). Whether VAT is included is not stated. Registration includes a free one-year subscription to the Journal of Health Data Protection, not combinable with other discounts. Online registration closes on 11 October 2026 at 23:59, with on-site registration at the venue afterwards; the same page also says registrations close after 8 October (), and the two dates are not reconciled, so confirm by email. Several attendees can be registered in one booking.
Speakers come through a call for abstracts on the official site, uploaded through the form or sent by email to contact@ehdpc.org. The listed deadline is 29 August (the year is not printed) and it has passed. Abstracts are in English, 250 words at most, structured as introduction, methods, results and discussion, and the author states a topic and a preference for poster, oral communication or no preference. The five topics are certifications and codes of conduct, anonymisation, pseudonymisation and synthetic data, cybersecurity in healthcare, AI in healthcare and research, and secondary use of health data. Accepted oral communications run 10 minutes. Invited panel and workshop roles are not described as open to application.
The site invites sponsorship and partnership enquiries through its contact page and lists no packages, prices or exhibition floor plan. The programme describes no exhibition area, and the organiser's model is conference-led, so a stand is not an obvious option. Contact is by the web form or contact@ehdpc.org. Not publicly disclosed: sponsor tiers and prices; searched the home, programme, registration and contact pages.
Not publicly disclosed in text. The home page has sections labelled "Scientific partners" and "partners", but their contents are logo images with no readable names, and no sponsor list or tier appears elsewhere on the site. Companies named in the programme as speakers' employers are not sponsors by that fact alone.
By the published roster, the room is led by life-sciences privacy teams (UCB, Novartis, AstraZeneca, Sanofi, Roche, Takeda, Menarini, Opella Healthcare, GE HealthCare, MedTech Europe), data protection and health authorities (CNIL, the Italian Garante, LfDI Rheinland-Pfalz, the European Commission, the OECD, the Health Data Hub), law firms (Covington & Burling, Fieldfisher, Faegre Drinker, De Gaulle Fleurance) and academic and research institutions. Technology companies appear in smaller numbers (Meta, Bosch, IDEMIA, Netcompany, Tandem Health). This is a reading of the speaker list, not attendee data.
No press accreditation procedure is published. The only media route is a reduced-rate media ticket at 360 euros (210 euros before 30 August), granted on upload of a valid press card and validated within seven days. Questions go through the contact form or contact@ehdpc.org. No press contact is named.
None found in the sourced material. Searches returned the organiser's site and its YouTube channel (a recap of the previous edition), event listings from The DPO Centre and the Swiss Personalized Health Network, and EFDPO pages, but no independent news article or trade report. The Journal of Health Data Protection is run by the organiser.
There is no independent coverage to rate. What exists falls into two groups: placed or promotional material from the organiser's own channels, and event listings by speakers' employers that repeat the programme, such as The DPO Centre's page for its two speakers. Attendance figures circulating for past editions are organiser-side or listing-side and unaudited. The DPO Centre listing also swaps the slot times of its two speakers against the organiser's programme, which this fiche follows.
Skip it if you want a product exhibition, a start-up pitch stage or an investor event: the programme has none of these. It is also a poor fit for attendees who want clinical content rather than data-governance content, and for speakers who need a large open call, since most panel and workshop roles are invited and the abstract deadline of 29 August has passed. It suits data protection officers, privacy counsel and EHDS implementation leads.
The congress is one of several digital health dates in October 2026. World Health Summit in Berlin runs 11 to 13 October 2026, the day before the congress opens in Paris, and Frontiers Health in Berlin runs 20 to 21 October 2026. Unlike those events, EHDPC is a regulatory and data protection meeting rather than a product, investment or policy-summit event, so it is a different purchase decision than the neighbouring dates suggest.
No. The official site lists the 2023, 2024 and 2025 editions, and the 2026 edition is the fourth, all in Paris. No satellite or regional edition is announced.
Not publicly disclosed as a formal policy. The website, programme and abstract rules are all in English, and the speakers come from more than a dozen countries; no interpretation is mentioned.
Not publicly disclosed for 2026: the registration page offers only in-person tickets and mentions no livestream. A privacy notice on the site, written for an earlier edition, says session recordings are provided to attendees for a limited time after the event and archived internally for one year, and the organiser's YouTube channel carries a recap of the previous edition.
Not publicly disclosed. The registration page and legal pages state no refund, cancellation or substitution terms; searched the registration page, the legal notice and the contact page.
Not publicly disclosed. No accessibility statement appears on the programme, registration or contact pages for the hotel or for Onepoint.
The hotel is at 55 to 57 Avenue Raymond Poincaré, 75116 Paris, and is described in hotel listings as a short walk from Place du Trocadéro (unverifiable information). The official programme links a map and the hotel website. The congress dinner venue on day two, Onepoint at 14 avenue d'Eylau, is five minutes' walk from the hotel, and day three is at Onepoint, 29 rue des Sablons, also in the 16th arrondissement. Taxis and rail connections are not described by the organiser.
The congress puts the people who must sign off on health data use in the same rooms as the regulators who write the rules. The 2026 roster pairs the Italian Garante, the CNIL, a German state data protection commissioner and the European Commission with privacy leads from UCB, Novartis, AstraZeneca, Sanofi, Roche and Takeda, and it spends its last day on EHDS readiness. For a DPO preparing for the European Health Data Space, that mix of enforcers and implementers is the reason to go; a product conference cannot offer it.
The organiser calls the congress Europe's leading independent forum, but the site names no legal entity, no committee in text and no past attendance, so the claim cannot be checked. The only quantities on the site are prices, session counts and the speaker roster, and those are verifiable; any audience size quoted by third-party listings (about 200 for 2025) is unaudited. The organiser's own officers also carry much of the programme: Pierre-Yves Lastic opens, co-chairs the first plenary and closes, Dipak Kalra chairs the day-three plenary and closes, and Daniela Will speaks in three separate sessions, so the long speaker list is less independent than its length suggests.
Official site: https://www.ehdpc.org/. The programme is at https://www.ehdpc.org/program-2026, registration at https://www.ehdpc.org/register-online/, past editions at https://www.ehdpc.org/past-editions/ and the abstract form at https://www.ehdpc.org/submit-your-abstract/. The organiser's email is contact@ehdpc.org.