CEGEDIM SANTÉ
€800,000
Non-compliance with general data processing principles
결정 날짜
2024년 9월 12일
권한
French Data Protection Authority (CNIL)
FR
섹터
Health Care
국가
FR
법률
GDPR상태
FINAL설명
The French DPA has imposed a fine of EUR 800,000 on CEGEDIM SANTÉ. The company, which provides software for medical practices, had transferred customer data for research purposes. However, the DPA found that this data was not anonymous but only pseudonymized, making re-identification possible.
법적 인용
Art. 5 (1)Art. 66
문제 및 위반 사항
Non-compliance with general data processing principles