Compliance Radar
Who was sanctioned, and for what?
Fines, court rulings and incidents from Europe, North America, Latin America and Asia-Pacific: 1,905 cases from 39 jurisdictions, each with an official source and checked against that source before publication. Filter by country, area of law and sector. Click a chart to drill down one level.
Click a bar to drill down one level.
Where?
by regionAll jurisdictions
What for?
by area of lawAll areas of law
Who?
by company- Becton, Dickinson and Company (BD) €166.7m 42 % · 1 case
- Anonymised companies €56.6m 14 % · 21 cases
- Access DX Laboratory, LLC €31.7m 8 % · 1 case
- Advanced Pathology Solutions PLLC und APS MSO LLC €25.9m 6 % · 1 case
- C.R. Bard, Inc.; Liberator Medical Supply, Inc.; Liberator Holdings; Rochester Medical Corporation €16.3m 4 % · 1 case
- NUWAY Alliance, Inc. €15.8m 4 % · 1 case
- Medirex s. r. o.; KLINICKÁ BIOCHÉMIA s.r.o.; Unilabs Slovensko, s. r. o.; synlab slovakia s. r. o.; Asociácia laboratórií €14.6m 4 % · 1 case
- Oroville Hospital €9.77m 2 % · 1 case
- NeoGenomics Laboratories Inc. €8.59m 2 % · 1 case
- PHOENIX Zdravotnícke zásobovanie, a.s.; TRANSMEDIC SLOVAKIA, s.r.o. (in Konkurs) €7.8m 2 % · 1 case
- 33 more€46m
When?
per quarter, by date of decision| Period | Cases | Total |
|---|---|---|
| Q4 2023 | 0 | – |
| Q1 2024 | 0 | – |
| Q2 2024 | 0 | – |
| Q3 2024 | 0 | – |
| Q4 2024 | 0 | – |
| Q1 2025 | 0 | – |
| Q2 2025 | 0 | – |
| Q3 2025 | 0 | – |
| Q4 2025 | 0 | – |
| Q1 2026 | 0 | – |
| Q2 2026 | 1 | €5m |
| Q3 2026 | 0 | – |
| Q4 2026 | 0 | – |
1 case
26 May 2026 IQVIA Operations FranceCNIL: €5m fine for IQVIA Operations France over health data warehouses €5m
The CNIL (French data protection authority) fined IQVIA Operations France EUR 5,000,000 because, for two health data warehouses authorised by the CNIL (fed with data from around 14,000 pharmacies and several thousand medical practices), the company did not comply with the conditions of the authorisations, including log analysis, multi-factor authentication, patient information and the right to object. In addition, pharmacy customers were not informed of the transfer of their data, in-house studies were carried out without the required authorisation and the pharmacy software transmitted data even after a refusal (Art. 25 GDPR). The CNIL classified the data as pseudonymised rather than anonymous and ordered remedial action within six months, subject to a penalty payment of EUR 10,000 per day.
Anyone working with authorised health data must implement the conditions of the authorisation technically as well and actively monitor how partners inform the individuals concerned.
Conditions for processing health data
- Authority / court
- Commission nationale de l'informatique et des libertés (CNIL), formation restreinte
- Area of law
- Data protection · Data subject rights and transparency
- Legal basis
- Art. 66 Loi n° 78-17 du 6 janvier 1978 (Loi Informatique et Libertés); Art. 14 und 25 DSGVO
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Healthcare
- Culpability
- negligent
- Mitigating circumstances
- The security shortcomings were remedied after the inspections.
- Published
- 28 May 2026
- CNIL: Données de santé : sanction de 5 millions d'euros à l'encontre de la société IQVIA (28.05.2026) Press release of an authority
- Délibération de la formation restreinte n° SAN-2026-008 du 26 mai 2026 concernant la société IQVIA OPERATIONS FRANCE Decision of an authority
Checked against the official source on 2 Oct 2026 · Direct link