Skip to Primary Navigation

Cegedim Santé fined €800,000 for processing health data unlawfully

Doctor gestures in front of the electronic patient file.
Photo: Clemens Bilan – Pool/Getty Images

The data was found to be pseudonymous – not anonymous – making it possible to re-identify the people concerned.

CNIL has fined Cegedim Santé €800,000 ($886,809) for processing health data without authorization. The French Data Protection Authority said that the fine reflects the “seriousness of the breaches, the massive nature of the processing and the fact that the data concerned is health data, and therefore sensitive data.”

The company, which publishes

Get full access, free for a month

Start your 28-day free trial to continue reading and access
all content on GRIP – no payment details required.

What’s included:

  • Every new article, plus our 5,000+ archive
  • Daily regulatory insight and guidance
  • Exclusive interviews and in-depth analysis
  • Coverage of industry-leading events and conferences
  • All podcasts and videos, featuring industry experts
  • The full set of Rules Navigator tools
  • An ad-free experience