Spain

OES GLOBAL ENERGY S.L.

35,000 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2022-10-17.

Rank · Sector

#88

of 167 in Transportation and Energy

Rank · Spain

#291

of 1,075

Rank · All fines

#865

of 3,050

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2022-10-17
Controller / Processor: OES GLOBAL ENERGY S.L.
Sector: Transportation and Energy
Quoted Articles: Art. 5 (1) f) GDPR, Art. 32 GDPR
Type of violation: Non-compliance with general data processing principles

Summary

The Spanish DPA imposed a fine of EUR 35,000 on OES GLOBAL ENERGY S.L.. A customer of the controller had filed a complaint with the DPA after receiving an e-mail from the controller containing documents relating to the termination of electricity contracts of other customers. These documents contained personal data of the customers such as their names and ID numbers. The DPA considered this unlawful disclosure of personal to be a violation of the principle of confidentiality and integrity, as well as a lack of sufficient technical and organizational measures to protect personal data.

Open original source Links to the regulator's original publication or another source.