PRIVANOVA SAS

Their core work

Privanova is a Paris-based SME specializing in data protection, privacy compliance, and cybersecurity risk assessment for EU-funded research and innovation projects. They provide GDPR expertise, privacy-by-design consulting, and security certification support across diverse domains — from healthcare data systems to IoT platforms and supply chain security. Their practical contribution to consortia centers on ensuring that project outputs meet European regulatory frameworks (GDPR, EU Cybersecurity Act, NIS Directive) and international standards like ISO 27001 and ISO 28001.

What they specialise in

How they've shifted over time

Privanova's early H2020 work (2020–2021) was firmly rooted in cybersecurity standards and digital infrastructure — ISO 27001 compliance, supply chain resilience, IoT security, and cybercrime prevention. From 2021 onward, their focus broadened into healthcare data governance (DigiCare4You, FACILITATE) and law enforcement applications (TRACE), suggesting a deliberate move toward applying their privacy and compliance expertise in regulated, high-sensitivity domains. The shift from purely technical cybersecurity toward ethical data reuse and patient-centred frameworks signals growing specialization in trusted data ecosystems.

Privanova is evolving from a cybersecurity compliance specialist into a broader trusted data governance partner, increasingly working at the intersection of privacy, health, and AI ethics.

How they like to work

Privanova operates exclusively as a participant, never coordinating projects, which is typical for a specialist SME that provides targeted expertise rather than driving the research agenda. With 128 unique partners across 27 countries in just 8 projects, they work in large, diverse consortia — averaging 16 partners per project. This wide network with low repetition suggests they are a flexible, in-demand partner valued for a specific niche (privacy/compliance) rather than a hub organization that builds recurring coalitions.

Privanova has collaborated with 128 distinct partners across 27 countries, giving them one of the broadest geographic networks relative to their project count. Their partnerships span nearly all of the EU, with no visible geographic concentration beyond their French base.

What sets them apart

Privanova occupies a specific and hard-to-fill niche: practical GDPR and privacy compliance delivered as a service within R&I consortia. Unlike large consultancies, they are an SME embedded in technical projects, which means they understand both the regulatory requirements and the engineering realities. Their ability to apply the same privacy expertise across cybersecurity, healthcare, IoT, and financial crime makes them a versatile compliance partner for any consortium handling sensitive data.

Highlights from their portfolio

• TRACE
  Largest funded project (EUR 298,750), combining AI with financial crime investigation — a significant expansion beyond their traditional cybersecurity domain.
• FACILITATE
  Addresses clinical trial data reuse under ethical and legal frameworks, representing their deepest push into health data governance with a timeline extending to 2026.
• CYRENE
  Directly targets EU Cybersecurity Act certification for supply chains, combining ISO 27001/28001 standards — the most standards-intensive project in their portfolio.