Enforcement
EN CEGEDIM SANTÉ: Non-compliance with general data processing principles
€800,000 fine - French Data Protection Authority (CNIL)
Content
The French DPA has imposed a fine of EUR 800,000 on CEGEDIM SANTÉ. The company, which provides software for medical practices, had transferred customer data for research purposes. However, the DPA found that this data was not anonymous but only pseudonymized, making re-identification possible.
GDPR Articles: Art. 5 (1) a) GDPR, Art. 66 Loi n° 78-17 du 6 janvier 1978
Industry: Health Care