GoKawiilIQVIA fined €7 million for inadequate health data anonymization in Italy
Italy's Data Protection Authority penalized IQVIA €7 million after discovering the company's Italian division stored health data of about one million patients with insufficient anonymization measures. The investigation revealed that despite using unique codes, the detailed information could enable re-identification of individuals over time, violating GDPR rules. The authority also found IQVIA processed data without proper legal grounds and failed to set clear data retention policies, with some records dating back over two decades.