DEI S.A.

What happened

The DPA fined an energy supplier and four call-centre operators €880,000 in total for inadequate technical and organisational measures, mixed-purpose calls, insufficient processor oversight and unauthorised use of a subcontractor.

Summary from GDPRhub (noyb), written by its volunteers, not by Fino. CC BY-NC-SA 4.0.

Rules involved

• Art. 5Principles relating to processing of personal data5(1)(a) · 5(1)(b) · 5(1)(d) · 5(1)(e)Read →
• Art. 28ProcessorRead →
• Art. 29Processing under the authority of the controller or processorRead →
• Art. 32Security of processingRead →

• Data principles
• Data security
• Processor obligations