Italy

Eni Gas e Luce

3,000,000 €

GDPR enforcement action by Italian Data Protection Authority (Garante) on 2019-12-11.

Rank · Sector

#15

of 165 in Transportation and Energy

Rank · Italy

#20

of 543

Rank · All fines

#98

of 3,042

Case details

Authority: Italian Data Protection Authority (Garante)
Date: 2019-12-11
Controller / Processor: Eni Gas e Luce
Sector: Transportation and Energy
Quoted Articles: Art. 5 GDPR, Art. 6 GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Italian supervisory authority imposed two fines totalling EUR 11,5 million on Eni Gas and Luce (Egl) for unlawful processing of personal data in the context of advertising activities and activation of unsolicited contracts. The second fine of EUR 3 million concerns infringements resulting from the conclusion of unsolicited contracts for the supply of electricity and gas under 'market economy' conditions. Many persons complained to the Authority that they only learned of the conclusion of a new contract after receiving the letter of termination of the contract with the previous supplier or the first Egl invoices. In some cases, the complaints reported false information in the contracts and forged signatures.

Open original source Links to the regulator's original publication or another source.