Madrileña Red de Gas
€12,000
Insufficient technical and organisational measures to ensure information security
Fecha de la decisión
No disponible
Autoridad
Spanish Data Protection Authority (aepd)
ES
Sector
Transportation and Energy
País
ES
Ley
GDPREstado
FINALDescripción
The gas company did not have appropriate measures in place to verify the identity of the data subject. The person who filed the complaint alleges that the company e-mailed his information to a third party in response to a request.
Citas legales
Art. 32
Problemas e infracciones
Insufficient technical and organisational measures to ensure information security