French Data Protection Authority (CNIL) · 12 September 2024
CEGEDIM SANTÉ
Non-compliance with general data processing principles
Fine€800,000Fine issued
- Regulator
- French Data Protection Authority (CNIL)
- Decided
- 12 September 2024
- Country
- France
- Sector
- Health Care
- Regulator’s reference
- Not recorded
- Fino case number
- 2024/FR/004
What happened
The DPA fined a software provider for the health sector €800,000 for a violation of Article 5 GDPR and national data protection law. The provider unlawfully processed patients’ data, collected by doctors and incorrectly assumed the data were anonymized even though data subjects could still be identified.
Summary from the GDPRhub page for this decision, written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Data principles
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2024/FR/004.