Doctolib AI Data: How to Opt Out

Log into your Doctolib account at doctolib.fr, go to your account settings (Mon compte), then find the 'Mes données' or 'Confidentialité' section. There you will find an option to object to the use of your health data for the AI research project. The process takes a few clicks. If you cannot find it, Que Choisir's step-by-step guide (published July 2026) details the exact path. Acting before the project goes live (August 2026) is recommended.

Doctolib launched an AI research project in August 2026 in partnership with Inria, Inserm, and Université Paris Cité. It uses pseudonymized (not fully anonymized) patient data, including medical notes, prescriptions, and health histories entered by doctors. The scheme is opt-out by default: patients who do not take action are considered to have consented.

Doctolib remains a legitimate medical booking platform used by roughly 70 million patients in France and operating under French and European data protection law. The new AI research project has raised privacy concerns because the data consent is opt-out rather than opt-in, and the data used is pseudonymized rather than fully anonymized. Civil liberties groups such as the Ligue des droits de l'Homme have expressed concern about profiling risks. Patients who do not want their data used can opt out.

Doctolib collects appointment booking data (time, practitioner, specialty) and, through its AI research project launching August 2026, will also process clinical notes, prescriptions, and medical histories that doctors enter into the platform. This is pseudonymized data linked to your account but not directly identified by name in research outputs.

Doctolib operates under GDPR and French health data law (the CNIL regulates it). The AI research project has been criticised by privacy advocates for using an opt-out rather than opt-in consent model, which some argue does not meet GDPR's standard of 'freely given and explicit' consent for sensitive health data. The CNIL's stance on this specific project has not been published as of August 2, 2026.

Several reasons: the new AI research project uses patient health data on an opt-out basis (many users only learned about it from news coverage); earlier distrust after Doctolib was found using US tech providers (Google, Microsoft, Anthropic) for some AI features; and a large health data breach at rival platforms Viamedis and Almerys in May 2026 that heightened sensitivity around medical data in France.

The AI research project announced in August 2026 is a partnership with Inria (France's national research institute for digital science), Inserm (national institute for health and medical research), and Université Paris Cité.

Doctolib says it does not sell patient data. The new AI research project is framed as a scientific research partnership, not a commercial data sale. However, critics note that sharing pseudonymized health data with external institutions, even non-profit ones, carries risks of re-identification and raises questions about who ultimately benefits from the research outputs.