Spain

Madrileña Red de Gas

12,000 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on Unknown.

Rank · Sector

#109

of 165 in Transportation and Energy

Rank · Spain

#364

of 1,071

Rank · All fines

#1,254

of 3,042

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: Unknown
Controller / Processor: Madrileña Red de Gas
Sector: Transportation and Energy
Quoted Articles: Art. 32 GDPR
Type of violation: Insufficient technical and organisational measures to ensure information security

Summary

The gas company did not have appropriate measures in place to verify the identity of the data subject. The person who filed the complaint alleges that the company e-mailed his information to a third party in response to a request.

Open original source Links to the regulator's original publication or another source.