Italy

Acea Energia S.p.A.

3,000,000 €

GDPR enforcement action by Italian Data Protection Authority (Garante) on 2025-04-10.

Rank · Sector

#17

of 165 in Transportation and Energy

Rank · Italy

#21

of 543

Rank · All fines

#102

of 3,042

Case details

Authority: Italian Data Protection Authority (Garante)
Date: 2025-04-10
Controller / Processor: Acea Energia S.p.A.
Sector: Transportation and Energy
Quoted Articles: Art. 5 (1) a), f) GDPR, Art. 6 GDPR, Art. 7 GDPR, Art. 13 GDPR, Art. 24 GDPR, Art. 25 GDPR, Art. 28 GDPR, Art. 32 GDPR
Type of violation: Insufficient legal basis for data processing

Summary

The Italian DPA imposed a fine of EUR 3,000,000 on Acea Energia S.p.A. The controller built a network of call centers that engaged in aggressive customer recovery and marketing calls using data obtained and collected by the controller in a list. The controller had no legal basis for processing the data.

Open original source Links to the regulator's original publication or another source.