CNIL (France) · 26 April 2026
IQVIA Operations France
About: Accountability, Transparency
Fine€5,000,000Violation found
- Regulator
- CNIL (France)
- Decided
- 26 April 2026
- Country
- France
- Sector
- Not given
- Regulator’s reference
- SAN-2026-008
- Fino case number
- 2026/FR/010
What happened
The DPA fined a pharmaceutical consulting firm €5,000,000 for insufficiently anonymising data processed in its pharmacy and medical-record data warehouse, allowing the unwanted identification of data subjects by singling them out. The DPA ordered the controller to bring its processing into compliance.
Summary from GDPRhub (noyb), written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Art. 14Information to be provided where personal data have not been obtained from the data subjectRead →
- Art. 25Data protection by design and by defaultRead →
- Accountability
- Transparency
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2026/FR/010.