CEGEDIM SANTÉ
€800,000
Non-compliance with general data processing principles
Dato for beslutning
12. september 2024
Myndighet
French Data Protection Authority (CNIL)
FR
Sektor
Health Care
Land
FR
Lov og rett
GDPRStatus
FINALBeskrivelse
The French DPA has imposed a fine of EUR 800,000 on CEGEDIM SANTÉ. The company, which provides software for medical practices, had transferred customer data for research purposes. However, the DPA found that this data was not anonymous but only pseudonymized, making re-identification possible.
Juridiske henvisninger
Art. 5 (1)Art. 66
Problemer og overtredelser
Non-compliance with general data processing principles