Acquirente Unico S.p.A.

What happened

The Italian DPA has imposed a fine of EUR 90,000 on Acquirente Unico S.p.A. Acquirente Unico manages an integrated information system comprising a database of energy delivery points for gas and electricity as well as identifying and contractual data on end customers. A data subject filed a request to update their personal data regarding a gas supply identifier that had been attributed to a deceased person. The controller did not comply with the request, stating that they were not responsible for communication between end customers and energy suppliers. Investigators found that in three specific cases the database contained supply contracts linked to deceased individuals. Furthermore investigators found that there were 11,711 customers over 100 years old with 25,713 active supply contracts in their name.

Summary from the CMS Enforcement Tracker, not by Fino. CC BY-NC-SA 4.0.

Rules involved

• Art. 12Transparent information, communication and modalities for the exercise of the rights of the data subjectRead →
• Art. 16Right to rectificationRead →
• Art. 28ProcessorRead →

• Data subject rights
• Processor obligations
• Transparency