CEGEDIM SANTÉ
€800,000
Non-compliance with general data processing principles
Data della decisione
12 settembre 2024
Autorità
French Data Protection Authority (CNIL)
FR
Settore
Health Care
Paese
FR
Legge
GDPRStato
FINALDescrizione
The French DPA has imposed a fine of EUR 800,000 on CEGEDIM SANTÉ. The company, which provides software for medical practices, had transferred customer data for research purposes. However, the DPA found that this data was not anonymous but only pseudonymized, making re-identification possible.
Citazioni legali
Art. 5 (1)Art. 66
Problemi e violazioni
Non-compliance with general data processing principles