Madrileña Red de Gas
€12,000
Insufficient technical and organisational measures to ensure information security
Data della decisione
Non disponibile
Autorità
Spanish Data Protection Authority (aepd)
ES
Settore
Transportation and Energy
Paese
ES
Legge
GDPRStato
FINALDescrizione
The gas company did not have appropriate measures in place to verify the identity of the data subject. The person who filed the complaint alleges that the company e-mailed his information to a third party in response to a request.
Citazioni legali
Art. 32
Problemi e violazioni
Insufficient technical and organisational measures to ensure information security