Italy fines IQVIA $7.8 million over health data de-anonymization risks

Italy's GPDP fined IQVIA €7 million ($7.8M) for inadequate anonymization of health data on roughly one million patients. The database, built from 800 general practitioners, used codes that allowed patients to be tracked and re-identified. IQVIA has 120 days to comply.

• €7 million ($7.8M) fine for GDPR violations in health data processing
• Database covered about 1 million patients from 800 general practitioners
• Records for 3,300 patients included names, tax IDs and addresses
• GPDP gave IQVIA 120 days to bring practices into compliance