This week, Health-ISAC®‘s Hacking Healthcare® examines a new European Commission consultation tied to the action plan for the cybersecurity of hospitals and healthcare providers that was put forward in January. Then, following our last article on Singapore’s introduction of a new draft guidance on medical device cybersecurity, we examine the French Commission Nationale de l’Informatique et des Libertés (CNIL) public consultation on draft recommendations for the compliance and security of electronic patient records.[i]