Spain

Iberdrola Clientes

100,000 €

GDPR enforcement action by Spanish Data Protection Authority (aepd) on 2021-02-03.

Rank · Sector

#59

of 167 in Transportation and Energy

Rank · Spain

#100

of 1,075

Rank · All fines

#467

of 3,050

Case details

Authority: Spanish Data Protection Authority (aepd)
Date: 2021-02-03
Controller / Processor: Iberdrola Clientes
Sector: Transportation and Energy
Quoted Articles: Art. 5 (1) d) GDPR, Art. 17 GDPR
Type of violation: Insufficient fulfilment of data subjects rights

Summary

The Spanish DPA (AEPD) imposed a fine of EUR 100,000 on Iberdrola Clientes, SAU. The data subject had terminated an existing contract with the controller due to a move and therefore requested the deletion of his/her data. This request was rejected by the controller with reference to outstanding invoices. It turned out that the controller had sent the bills to the old address of the data subject. Even after the data subject informed the controller of the change of address, new notices regarding the deletion request and invoices were sent to the old address.

Open original source Links to the regulator's original publication or another source.