6000 Euro Fine for SC Enel Energie SA
The company SC Enel Energie SA violated several provisions of the GDPR when processing customer data.
Personal data was not processed in accordance with these principles. Furthermore, the company was unable to prove the data subject’s consent to the data processing and was therefore unable to fulfill its accountability. The data protection authority also found that appeals to data processing were ignored.
The data protection authority therefore imposed two fines of each around 3,000 euros on the company.
Type of Issue:
violated rights of the data subject
Number of involved data records:
Special category of data involved:
Violation of GDPR Paragraph:
21. Right to object
5. Principles relating to personal data processing
6. Lawfulness of processing
7. Conditions for consent