Italy

Acquirente Unico S.p.A.

90,000 €

GDPR enforcement action by Italian Data Protection Authority (Garante) on 2026-06-18.

Rank · Sector

#47

of 376 in Public Sector and Education

Rank · Italy

#97

of 595

Rank · All fines

#532

of 3,127

Case details

Authority: Italian Data Protection Authority (Garante)
Date: 2026-06-18
Controller / Processor: Acquirente Unico S.p.A.
Sector: Public Sector and Education
Quoted Articles: Art. 12 GDPR, Art. 16 GDPR, Art. 28 GDPR
Type of violation: Insufficient fulfilment of data subjects rights

Summary

The Italian DPA has imposed a fine of EUR 90,000 on Acquirente Unico S.p.A. Acquirente Unico manages an integrated information system comprising a database of energy delivery points for gas and electricity as well as identifying and contractual data on end customers. A data subject filed a request to update their personal data regarding a gas supply identifier that had been attributed to a deceased person. The controller did not comply with the request, stating that they were not responsible for communication between end customers and energy suppliers. Investigators found that in three specific cases the database contained supply contracts linked to deceased individuals. Furthermore investigators found that there were 11,711 customers over 100 years old with 25,713 active supply contracts in their name.

Open original source Links to the regulator's original publication or another source.