Spain

Iberdrola Clientes

24,000 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2020-07-02.

Rank · Sector

#95

of 167 in Transportation and Energy

Rank · Spain

#322

of 1,075

Rank · All fines

#987

of 3,050

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2020-07-02
Controller / Processor: Iberdrola Clientes
Sector: Transportation and Energy
Quoted Articles: Art. 5 GDPR
Type of violation: Non-compliance with general data processing principles

Summary

A third person had received an electricity bill with personal details such as name, address and bank account of another customer. The reason for this was that Iberdola Clientes was not able to guarantee adequate security measures in the processing of the personal data of the data subject, in violation of the principles of data integrity and confidentiality. The fine of €40,000 has been reduced to €24,000 due to voluntary payment.

Open original source Links to the regulator's original publication or another source.