Spain

Madrileña Red de Gas

12,000 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on Unknown.

Rank · Sector

#111

of 168 in Transportation and Energy

Rank · Spain

#368

of 1,075

Rank · All fines

#1,262

of 3,051

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: Unknown
Controller / Processor: Madrileña Red de Gas
Sector: Transportation and Energy
Quoted Articles: Art. 32 GDPR
Type of violation: Insufficient technical and organisational measures to ensure information security

Summary

The gas company did not have appropriate measures in place to verify the identity of the data subject. The person who filed the complaint alleges that the company e-mailed his information to a third party in response to a request.

Open original source Links to the regulator's original publication or another source.