CEGEDIM SANTÉ
€800,000
Non-compliance with general data processing principles
Decision Date
September 12, 2024
Authority
French Data Protection Authority (CNIL)
FR
Sector
Health Care
Country
FR
Law
GDPRStatus
FINALDescription
The French DPA has imposed a fine of EUR 800,000 on CEGEDIM SANTÉ. The company, which provides software for medical practices, had transferred customer data for research purposes. However, the DPA found that this data was not anonymous but only pseudonymized, making re-identification possible.
Legal Citations
Art. 5 (1)Art. 66
Issues & Violations
Non-compliance with general data processing principles