Fino

Spanish Data Protection Authority (AEPD) · 29 December 2022

SUMINISTRADOR IBÉRICO DE ENERGÍA, S.L.

Insufficient legal basis for data processing

Fine€24,000Fine issued
Regulator
Spanish Data Protection Authority (AEPD)
Decided
29 December 2022
Country
Spain
Sector
Transportation and Energy
Regulator’s reference
Not recorded
Fino case number
2022/ES/007
Export as PDF

What happened

The Spanish DPA fined an electricity and gas company €24,000 for the lack of a legal basis under Article 6(1) GDPR to process the personal data of its client which was caused by an internal error in registering the data subject's will to enter into contract.

Summary from the GDPRhub page for this decision, written by its volunteers, not by Fino. CC BY-NC-SA 4.0.

Rules involved

  • Unlawful processing

Sources

The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.

Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2022/ES/007.