France: National Commission on Informatics and Liberty lawsuit into GERS, Santestat, and Cegedim Sante over allegations of unlawful health data processing

Progress

Current status
in force
13 Feb 2026 in force

Scope

Implementers
France
Policy Area
Data governance
Policy Instrument
Data protection regulation
Regulated Economic Activity
other service provider
software provider: other software
Government Branch
judiciary
Government Body
court
Implementation Level
national

Timeline of events

13 Feb 2026
in force

Council of State rejected appeals against sanctions on pseudonymised health data and reidentification risk (National Commission on Informatics and Liberty v GERS, Santestat, and Cegedim Santé)

On 13 February 2026, the Council of State rejected three appeals brought by GERS, including as successor to Santestat, and by Cegedim Santé against administrative fines imposed by the National Commission on Informatics and Liberties (CNIL) for unlaw…

Source
Event type investigation
Action type ruling
Government branch judiciary
Government body court