- Enforcing jurisdiction
- France · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
CEGEDIM SANTÉ – €800,000 Fine (France, 2024)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
CEGEDIM SANTÉ was fined EUR 800,000 for improperly handling customer data. The company transferred data for research without ensuring it was fully anonymous, which could allow individuals to be identified. This case highlights the importance of proper data handling practices for businesses dealing with personal information.
What happened
CEGEDIM SANTÉ transferred customer data for research purposes without ensuring it was fully anonymous.
Who was affected
Customers whose data was transferred by CEGEDIM SANTÉ for research.
What the authority found
The French DPA found that the data was only pseudonymized, making re-identification possible, which violated GDPR requirements.
Why this matters
This ruling emphasizes that companies must ensure data is truly anonymous before sharing it. Businesses should review their data handling procedures to avoid similar penalties.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Automated check recorded — 5 March 2026.
Processing notes: articles corrected, national law identified.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The French DPA has imposed a fine of EUR 800,000 on CEGEDIM SANTÉ. The company, which provides software for medical practices, had transferred customer data for research purposes. However, the DPA found that this data was not anonymous but only pseudonymized, making re-identification possible.
Related Enforcement Actions (0)
No other enforcement actions found for CEGEDIM SANTÉ in FR
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
12 September 2024
Authority
Commission Nationale de l'Informatique et des Libertés
Fine Amount
€800,000
Enforcement Tracker ID
ETid-2542
About this data
Cite as: Cookie Fines. CEGEDIM SANTÉ - France (2024). Retrieved from cookiefines.eu
Last updated: