PrivacySignal
← Front page
Enforcement

Health data: fine of 5 million euros against IQVIA

CNIL · · EU / France · Enforcement

France's data protection authority CNIL has imposed a €5 million fine on IQVIA, a healthcare data and analytics company, for violations related to the handling of health data.

Why this matters: Health data ranks among the most sensitive personal information, and this enforcement action signals that regulators are willing to impose meaningful financial penalties on commercial data brokers who profit from processing it without adequate legal safeguards.

Who should care: Lawyers · Privacy officers · Compliance · Healthcare professionals

#enforcement#healthcare
Read the original at CNIL → Browse the archive

This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.

Related stories

Enforcement
The Guardian — Tech · · International

Whistleblower Sarah Wynn-Williams sues Meta over attempts to ‘silence’ her

Former Meta executive Sarah Wynn-Williams has filed a federal lawsuit in California alleging the company used an arbitration ruling to unlawfully suppress her memoir and subjected her to coercive surveillance, constituting a First Amendment violation.

Why this matters: The case raises pointed questions about corporations leveraging private arbitration to silence dissent and whether surveillance of a former employee can be weaponized to chill whistleblowing — tools with implications well beyond any single workplace dispute.

Who should care: Lawyers · Privacy officers · Compliance · Cybersecurity · General readers · Policy

#enforcement#surveillance#privacy Read original →
Enforcement
EDPB · · EU

Supporting GDPR consistency: EDPB launches dedicated form

Brussels, 24 June – The EDPB has launched a dedicated contact form for stakeholders to report possible inconsistencies in how the GDPR is interpreted across Europe. This initiative reflects the commitments set out in the EDPB Helsinki Statement on enhanced clarity, support and engagement, aimed at strengthening the dialogue with stakeholders and ensuring consistent GDPR enforcement across Europe. The new tool enables stakeholders to report alleged divergences between national positions, as well as between national positions and those of the EDPB. The EDPB will not respond to individual submis…

Who should care: Lawyers · Privacy officers · Compliance · AI governance

#enforcement#gdpr Read original →
Enforcement
W WESH · · International

New federal lawsuit cites WESH 2 reporting on wrongful arrest using facial recognition

A new federal lawsuit references investigative reporting by WESH 2 in connection with a wrongful arrest allegedly caused by facial recognition technology, suggesting the incident has escalated from a news story into formal legal action.

Why this matters: Wrongful arrests driven by facial recognition errors illustrate the concrete civil-liberties stakes of biometric surveillance — particularly for misidentified individuals who face detention without reliable evidence, raising urgent due-process concerns.

Who should care: Lawyers · Privacy officers · Compliance · Cybersecurity · General readers · Policy

#enforcement#surveillance#privacy Read original →