Spain

Iberdrola Clientes

80,000 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2020-02-14.

Rank · Sector

#68

of 167 in Transportation and Energy

Rank · Spain

#119

of 1,075

Rank · All fines

#526

of 3,050

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2020-02-14
Controller / Processor: Iberdrola Clientes
Sector: Transportation and Energy
Quoted Articles: Art. 6 GDPR
Type of violation: Insufficient legal basis for data processing

Summary

Iberdola Clientes, an electricity company, terminated the data subject's contract without its consent, concluded three new contracts with the data subject, processed his personal data unlawfully and transferred the plaintiff's personal data to a third party without legal basis. In addition to this fine the AEPD also imposed another fine in the amount of EUR 50.000 under the old Spanish Data Protection Law.

Open original source Links to the regulator's original publication or another source.