6000 Euro Fine for SC Enel Energie SA
The company SC Enel Energie SA violated several provisions of the GDPR when processing customer data.
Personal data was not processed in accordance with these principles. Furthermore, the company was unable to prove the data subject’s consent to the data processing and was therefore unable to fulfill its accountability. The data protection authority also found that appeals to data processing were ignored.
The data protection authority therefore imposed two fines of each around 3,000 euros on the company.
Art des Verstoßes:
violated rights of the data subject
Waren sensible Daten betroffen?:
Violation of GDPR Paragraph:
21. Right to object
5. Principles relating to personal data processing
6. Lawfulness of processing
7. Conditions for consent
Press release of the Romanian data protection authority