Eni Gas e Luce
Date Issued
Regulation
Authority
Country
Violation Type
Currency
Violation Summary
The Italian Data Protection Authority (Garante) imposed two fines of €11,5 million total on Eni Gas and Luce because of the unlawful processing of personal data during an advertising campaign as well as for the activation of unsolicited contracts. This first fine of €8,5 million was issued for the unlawful processing of personal data in the context of a marketing campaign. The company made promotional calls without the consent of the contacted people and refused to acknowledge people’s wishes to be added onto a “do not contact” list. The company also did not provide an opt-out procedure for these unsolicited calls. The DPA also determined that the company lacked sufficient technical and organizational measures to protect users’ personal data. Data was also processed longer than the allowed retention period. According to the DPA, some data was also collected from third party entities that did not have consent from the data subjects to disclose that data.
Articles Violated
Related Headlines
Statista · 1/8/2026
strategic-risk-global.com · 3/13/2024
Arthur Cox LLP · 7/6/2020
Other Fines for Eni Gas e Luce
| Date | Regulation | Amount (USD) | Type |
|---|---|---|---|
| 2020-01-17 | GDPR | $3,240,000 | Non-compliance with lawful basis for data processing |
| 2019-12-11 | GDPR | $9,180,000 | Non-compliance with lawful basis for data processing |
| 2019-12-11 | GDPR | $3,240,000 | Non-compliance with lawful basis for data processing |