Your level of access to the ROR data depends on the nature of the data you wish to use (public/restricted) and the perimeter you wish to cover (one ROR or several ROR directories).

The ROR data in public access:

• is available as opendata since mid-2022;
• will be available directly on the national ROR with no specific procedure in early 2023.

The ROR data in restricted access (professional access):

• for one regional ROR, you must complete a request form to join the regional circle of trust and send it to the region’s GRADeS;
• for several ROR directories, you must complete a request form to join the national circle of trust and send it to the ROR program team.

PLATINES is a platform dedicated to interoperability tests for eHealth. It stimulates a ROR (version 2.4) and gives you the opportunity to use “test” data via several professional cases (a total of 94 test scenarios are available). These test scenarios are valid for the current ROR as well as the national ROR.

You must contact the ROR program team to request access to PLATINES.

Every component is described in the document below, “Model of exposure”.

The ROR components that belong to a national exchange nomenclature or model of exposure are indicated by the mention “TRE_R00”. TRE stands for Terminologies of Reference.

For example, components of the national exchange nomenclature are presented as such:

• statutJuridique : [1..1] Code <>  

• typeFermeture : [0..1] Code <> 

The notion of “center of expertise” does not exist in the nomenclature. Within the ROR, we took into account the notion of “center of reference”, which is created depending on some regions’ demand. This term is not appropriate to cover the complexity of centers of expertise / specialisation / skills. These structures depend on a system of labels, not authorisations. In these conditions, there is discrepancy in the occupational rate of these units, which can lead to an unmatched search. We will update our answer when we receive more information on this topic.

There is a specific FAQ on this topic, accessible here:

Generally speaking, the PGSSI-S needs to be applied as soon as personal health data are being handled. It is relevant to the public sector as well as the private sector, health professionals, workers of the social-health and social sectors, healthcare establishments and service providers. 

As a patient, the PGSSI-S is a seal of guarantee on the accountability of digital health ecosystems.

Complying with the PGSSI-S frames of reference is either required by law (if the documents have been approved by a ministerial decree) or meant to be followed on a short-term basis until the documents are approved by the ministry.

The PGSSI-S guides are not meant to be opposable. However, it is strongly recommended to meet as many of the criteria as possible, in order to create secure enough products and services, and stay in line with the general guidelines set out by the public health code and the GDPR. Moreover, it makes the compliance requirements easier to meet when you apply for a label or a certification, or request to be listed in the health professionals directories.