Skip to content
Submit incident
AII-1000-87681
AllegedThe record is a lawsuit, complaint or accusation that has not been decided.

Doctolib's AI consultation assistant raises data privacy concerns

Le Canard enchaîné reported in June 2026 that Doctolib, a medical appointment platform used by 90 million patients, was sharing sensitive health data with US-based AI companies Google, Microsoft and Anthropic via its consultation assistant tool deployed since 2024. Doctolib denied the allegations, stating that it does not sell health data and that the AI providers operate only as technical service providers under contractual restrictions preventing model training on consultation notes.

2 June 2026 · Doctolib · Privacy and surveillance
2 June 2026
AII-1000-876812 sources ↓
Quick facts
Category
Privacy and surveillance
Country
France
Source
BFMTV
Date
2 June 2026
Drafted by
Raidu Incident Detection

What happened

Since 2024, Doctolib has deployed an AI consultation assistant that uses language models from Google, Microsoft and Anthropic to transcribe and summarise medical consultation notes taken during appointments. The tool is offered as a paid subscription at €79 per month and generates summaries in under 15 seconds.

On 2 June 2026, Le Canard enchaîné reported that Doctolib was sharing medical consultation data with the American AI companies providing the language models. Doctolib's privacy policy and the involvement of US-based AI providers raised questions about whether consultation notes were being used to train the models.

Reported impact

The consultation data involves sensitive health information from approximately 90 million patients across France, Germany, Italy, and the Netherlands who use Doctolib's platform.

Index analysis

Doctolib stated that consultation notes do not train the AI models of Google, Anthropic or Microsoft, and that these companies act only as technical service providers under strict contractual restrictions prohibiting them from retaining or using data for their own purposes. The platform asserted that it does not sell health data to any party, noting that such sales are prohibited by GDPR in France and Europe.

Governance controls

Doctolib stated that it has contractual agreements restricting the AI providers from using consultation data to train their models and prohibiting them from retaining or exploiting the data. The platform stated its servers are hosted by Atos, Amazon Web Services and S3NS, all located in Europe.

Classification

Category
Privacy and surveillance
Industry
Healthcare, drugs and biotechnology
Country
France
Harm status
Potential harm
Intent
Unknown
Timing
Post-deployment
Harmed
Consumers
AI systems
Doctolib consultation assistant
Regulations
GDPR (cited)

Sources and evidence

This record was researched and written by the Index, based on the following original reporting.

BFMTV
Après les révélations du Canard enchaîné, Doctolib peut-elle garantir que nos données de santé ne sont pas captées par Google, Microsoft et Anthropic, dont elle utilise les IA?
5 June 2026
SudOuest.fr
Données personnelles et intelligence artificielle, Doctolib s'explique
8 June 2026
Sep 2026Anthropic tests Claude Money bank account access featureWell documentedPrivacy and surveillanceThe IndependentMemeburnWindows Report | Error-free Tech Life+2Sep 2026Anthropic builds predictive surveillance system to track activists and protestsReportedPrivacy and surveillanceCommon DreamsFuturismSep 2026'80s photo trend raises privacy and biometric data concernsWell documentedPrivacy and surveillanceCNN Arabicصدى البلدنبأ العرب+3Aug 2026Private ChatGPT Conversations Used as Evidence in US Court CasesConfirmedPrivacy and surveillanceWashington PostInternational Business Times UKInternational Business TimesAug 2026Google expands Android content scanning with SafetyCore and ContentSafetyManagerReportedPrivacy and surveillanceVosveteit.sk - Správy zo sveta technológií a vedy