The Italian Data Protection Authority fines IQVIA 7 million euros
The Italian Data Protection Authority (Garante per la protezione dei dati personali) has imposed a 7 million euro fine on IQVIA, a global leader in health data analytics. The decision follows an in-depth investigation that revealed serious irregularities in the processing of personal information belonging to a large number of Italian citizens.
According to the authority, the company collected and analyzed the health data of approximately one million patients, sourced from over 800 general practitioners. The main issue concerns the management of this information: the data, which should have been anonymous by law, did not in reality guarantee the anonymity of the patients involved.
The investigation showed that, although the data had been partially modified, it was still possible to trace the identities of individuals through cross-referencing techniques with other information. This represents a significant violation of the European General Data Protection Regulation (GDPR), which imposes very strict standards to protect the confidentiality of medical records.
In addition to the heavy financial penalty, the Data Protection Authority has ordered IQVIA to immediately cease the processing of data collected illicitly. The company must also delete all information that does not meet the anonymization requirements set forth by current legislation.
This incident underscores the importance of protecting sensitive data, especially in the medical field. The Data Protection Authority reiterated that safeguarding citizens' privacy must always be the absolute priority for all companies operating in the digital health sector.