France: National Commission for Informatics and Liberty investigation into IQVIA Operations for alleged violations of French Data Protection Act and General Data Protection Regulation

Progress

Current status
under deliberation
26 May 2026 in force
31 Mar 2025 under investigation
18 Jul 2024 under deliberation
29 Jun 2021 under deliberation

Scope

Implementers
France
Policy Area
Data governance
Policy Instrument
Data protection regulation
Regulated Economic Activity
other service provider
Government Branch
executive
Government Body
data protection authority
Implementation Level
national

Timeline of events

26 May 2026
in force

National Commission for Informatics and Liberty fined IQVIA Operations France EUR 5 million and issued compliance injunction for violations of French Data Protection Act and General Data Protection Regulation

On 26 May 2026, the National Commission for Informatics and Liberty (CNIL) imposed an administrative fine of EUR 5 million on IQVIA Operations France for breaches of Article 66 of Law No. 78-17 of 6 January 1978 relating to information technology, d…

Event type investigation
Action type ruling
Government branch executive
Government body data protection authority
31 Mar 2025
under investigation

National Commission for Informatics and Liberty notified sanction report to IQVIA Operations France for alleged violations of the French Data Protection Act and General Data Protection Regulation

On 31 March 2025, the National Commission for Informatics and Liberty (CNIL) rapporteur notified IQVIA Operations France of a sanction report detailing alleged breaches of Article 66 of the Data Protection Act and Articles 14 and 25 of Regulation (E…

Event type investigation
Action type interim ruling
Government branch executive
Government body data protection authority
18 Jul 2024
under deliberation

National Commission for Informatics and Liberty appointed rapporteur in investigation into IQVIA Operations France for alleged violations of the French Data Protection Act and General Data Protection Regulation

On 18 July 2024, the National Commission for Informatics and Liberty (CNIL) president appointed a rapporteur before the restricted committee to investigate alleged violations of Law No. 78-17 of 6 January 1978 relating to information technology, dat…

Event type investigation
Action type announcement
Government branch executive
Government body data protection authority
29 Jun 2021
under deliberation

National Commission for Informatics and Liberty opened investigation into IQVIA Operations France for alleged violations of the French Data Protection Act and General Data Protection Regulation

On 29 June 2021, the National Commission for Informatics and Liberty (CNIL) president decided to instruct the secretary general to carry out inspections of IQVIA Operations France for alleged violations of Law No. 78-17 of 6 January 1978 relating to…

Event type investigation
Action type announcement
Government branch executive
Government body data protection authority