Iberdrola Clientes

€50K($54K USD)final

Date Issued

2020-02-14

Regulation

Authority

Spanish Data Protection Authority (AEPD)

Country

Spain

Violation Type

Non-compliance with lawful basis for data processing

Currency

EUR

Violation Summary

The electricity company Iberdrola Clientes closed a client’s contract without their consent and opened three new contracts on their name also without their consent. The company also transferred the client’s personal data to third-party entities without a legal basis.

Articles Violated

Art. 6 GDPR

Other Fines for Iberdrola Clientes

DateRegulationAmount (USD)Type
2020-07-02GDPR$25,920Non-compliance with subjects' rights protection safeguards
2020-06-04GDPR$4,320Non-cooperation with Data Protection Authority
2020-02-14GDPR$86,400Non-compliance with lawful basis for data processing
2019-10-16GDPR$8,640Failure to cooperate with supervisory authority
2019-10-16GDPR$8,640Failure to cooperate with supervisory authority