Sanction RGPD French Data Protection Authority (CNIL) — CEGEDIM SANTÉ : 800 k€ (2024)
- Autorité de contrôle
- French Data Protection Authority (CNIL)
- Pays
- France
- Entreprise / secteur
- CEGEDIM SANTÉ
- Montant de l'amende
- 800 k€
- Date de la décision
- 12 septembre 2024
- Fondement juridique
- Art. 5 (1) a), Art. 66 Loi n° 78-17 du 6 janvier 1978
- Manquement
- Non-respect des principes de traitement
Résumé des faits
The French DPA has imposed a fine of EUR 800,000 on CEGEDIM SANTÉ. The company, which provides software for medical practices, had transferred customer data for research purposes. However, the DPA found that this data was not anonymous but only pseudonymized, making re-identification possible.