France

Pharmaceutical wholesaler

20,000 €

GDPR enforcement action by French Data Protection Authority (CNIL) on 2024-01-24.

Rank · Sector

#166

of 597 in Industry and Commerce

Rank · France

#57

of 74

Rank · All fines

#1,097

of 3,050

Case details

Authority: French Data Protection Authority (CNIL)
Date: 2024-01-24
Controller / Processor: Pharmaceutical wholesaler
Sector: Industry and Commerce
Quoted Articles: Unknown
Type of violation: Unknown

Summary

The French DPA has imposed a fine of EUR 20,000 on a pharmaceutical wholesaler due to violations of several regulations, including a lack of data security and insufficient cooperation with the DPA. Additionally, deficiencies were found regarding the maintenance of the record of processing activities, and the obligation to use only processors providing sufficient guarantees and assigned after authorization by the controller was not met.

Open original source Links to the regulator's original publication or another source.