Spanish Data Protection Authority (AEPD) · 4 May 2021
EDP Comercializadora, S.A.U.
Insufficient fulfilment of information obligations
Fine€1,500,000Fine issued
- Regulator
- Spanish Data Protection Authority (AEPD)
- Decided
- 4 May 2021
- Country
- Spain
- Sector
- Transportation and Energy
- Regulator’s reference
- Not recorded
- Fino case number
- 2021/ES/133
What happened
The Spanish DPA fined an energy company €1,500,000 for not providing sufficient information to data subjects under Article 13 GDPR, and for not implementing adequate measures to avoid or mitigate risks related to the data processing under Article 25 GDPR.
Summary from the GDPRhub page for this decision, written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Art. 13Information to be provided where personal data are collected from the data subjectRead →
- Art. 25Data protection by design and by defaultRead →
- Accountability
- Transparency
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2021/ES/133.