Italian DPA fines CRO for GDPR violation |

Data privacy especially when health data are involved and therefore coding, anonymization, and pseudo-anonymization are a very sensitive topic in clinical trials, whether interventional or not.

The Italian DPA found that the data were not anonymous: the assigned identifier combined with detailed information such as year of birth, sex, and diagnoses, made it possible to re-identify patients.

https://www.edpb.europa.eu/news/italian-dpa-fines-iqvia-eur-7-000-000-for-unlawful-processing-of-patients-health-data_en