Italian Data Protection Authority (Garante) · 17 July 2024
Hera Comm S.p.A.
Non-compliance with general data processing principles
Fine€5,000,000Fine issued
- Regulator
- Italian Data Protection Authority (Garante)
- Decided
- 17 July 2024
- Country
- Italy
- Sector
- Transportation and Energy
- Regulator’s reference
- Not recorded
- Fino case number
- 2024/IT/003
What happened
The DPA fined an energy provider €5,000,000 after it failed to implement adequate measures to ensure GDPR-compliance of its processors. The processors were able to forge contracts with unaware data subjects.
Summary from the GDPRhub page for this decision, written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Art. 5Principles relating to processing of personal data5(2)Read →
- Art. 12Transparent information, communication and modalities for the exercise of the rights of the data subject12(3)Read →
- Art. 15Right of access by the data subjectRead →
- Art. 24Responsibility of the controllerRead →
- Art. 28ProcessorRead →
- Art. 32Security of processingRead →
- Accountability
- Data principles
- Data security
- Data subject rights
- Processor obligations
- Transparency
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2024/IT/003.