CEGEDIM SANTÉ
€800,000
Non-compliance with general data processing principles
Fecha de la decisión
12 de septiembre de 2024
Autoridad
French Data Protection Authority (CNIL)
FR
Sector
Health Care
País
FR
Ley
GDPREstado
FINALDescripción
The French DPA has imposed a fine of EUR 800,000 on CEGEDIM SANTÉ. The company, which provides software for medical practices, had transferred customer data for research purposes. However, the DPA found that this data was not anonymous but only pseudonymized, making re-identification possible.
Citas legales
Art. 5 (1)Art. 66
Problemas e infracciones
Non-compliance with general data processing principles