Madrileña Red de Gas
€12K($13K USD)final
Date Issued
2019-01-21
Regulation
Authority
Spanish Data Protection Authority (AEPD)
Country
Spain
Violation Type
Failure to implement sufficient measures to ensure information security
Currency
EUR
Violation Summary
The gas company did not have the necessary technical measures in place to verify the identity of the subjects’ data. It was alleged by a third party that the company emailed their information to a third party in regards to a request.
Articles Violated
Art. 32 GDPR