IQVIA hit with EUR 7M fine over health data anonymization
Italy's Data Protection Authority (GPDP), the national regulator that enforces the EU's data protection rules in the country, has fined IQVIA €7 million ($7.8M). The authority says the company's handling of health records could have exposed around one million patients to identification, even though the data was supposed to be anonymous.
IQVIA is a multinational provider of healthcare data analysis, technology and clinical research services. On its website, the company says it operates in more than 100 countries and handles 68 petabytes of data and 1.2 billion patient records.
The GPDP began examining IQVIA's data-processing practices in April 2025. Last month it concluded that the company had not provided adequate guarantees that the health data it held was anonymized, despite its claims.