Italian Data Protection Authority (Garante) · 12 March 2026
Enel Energia S.p.A.
Insufficient legal basis for data processing
Fine€563,052Fine issued
- Regulator
- Italian Data Protection Authority (Garante)
- Decided
- 12 March 2026
- Country
- Italy
- Sector
- Transportation and Energy
- Regulator’s reference
- Not recorded
- Fino case number
- 2026/IT/033
What happened
The DPA fined an energy company €563,052 over its marketing activities. The company advanced marketing proposals during customer care calls, failed to oversee the operations of its processors, and failed to prevent unlawful marketing calls made on its behalf.
Summary from the GDPRhub page for this decision, written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Art. 5Principles relating to processing of personal dataRead →
- Art. 6Lawfulness of processingRead →
- Art. 7Conditions for consentRead →
- Art. 24Responsibility of the controllerRead →
- Art. 28ProcessorRead →
- Accountability
- Consent
- Data principles
- Processor obligations
- Unlawful processing
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2026/IT/033.