CEGEDIM SANTÉ
€800,000
Non-compliance with general data processing principles
Datum för beslut
12 september 2024
Myndighet
French Data Protection Authority (CNIL)
FR
Sektor
Health Care
Land
FR
Lag
GDPRStatus
FINALBeskrivning
The French DPA has imposed a fine of EUR 800,000 on CEGEDIM SANTÉ. The company, which provides software for medical practices, had transferred customer data for research purposes. However, the DPA found that this data was not anonymous but only pseudonymized, making re-identification possible.
Rättsliga hänvisningar
Art. 5 (1)Art. 66
Frågor och överträdelser
Non-compliance with general data processing principles