SC Enel Energie S.A.
€6K($6K USD)final
Date Issued
2020-01-14
Regulation
Authority
Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP)
Country
Romania
Violation Type
Non-compliance with lawful basis for data processing
Currency
EUR
Violation Summary
The fine was issued after a complaint alleging that Enel Energie had processed an individual’s personal data and that the natural gas and electricity company was unable to prove it obtained the individual’s consent to send email notifications. The national data protection authority also explained that the company had not taken the required measures to stop the transmission of the email notifications even after the affected person had made a request to this end. The company was fined two times €3,000.
Articles Violated
Art. 5 GDPRArt. 6 GDPRArt. 7 GDPRArt. 21 GDPR