# Hôpital privé de la Loire: Insufficient technical and organisational measures to ensure information security

- Type: Enforcement
- Source: French Data Protection Authority (CNIL)
- Date: 2026-07-21
- Original: https://www.enforcementtracker.com/ETid-3233
- Canonical: https://overview.legal/posts/353984

## Summary

Art. 32 GDPR, Art. 34 GDPR · Sector: Health Care · Decided 2026-07-21

## Full text

French Data Protection Authority (CNIL) fined Hôpital privé de la Loire €500,000 on 2026-07-21 for: Insufficient technical and organisational measures to ensure information security.
GDPR Articles: Art. 32 GDPR, Art. 34 GDPR
Sector: Health Care
Country: France
Source: https://www.cnil.fr/en/sanction-fine-hopital-prive-loire

---
Generated by overview.legal · https://overview.legal/posts/353984 · 2026-09-16