CEGEDIM SANTÉ
€800,000
Non-compliance with general data processing principles
Date de décision
12 septembre 2024
Autorité
French Data Protection Authority (CNIL)
FR
Secteur
Health Care
Pays
FR
Droit
GDPRStatut
FINALDescription
The French DPA has imposed a fine of EUR 800,000 on CEGEDIM SANTÉ. The company, which provides software for medical practices, had transferred customer data for research purposes. However, the DPA found that this data was not anonymous but only pseudonymized, making re-identification possible.
Citations légales
Art. 5 (1)Art. 66
Questions et violations
Non-compliance with general data processing principles