Madrileña Red de Gas
€12,000
Insufficient technical and organisational measures to ensure information security
결정 날짜
사용 불가
권한
Spanish Data Protection Authority (aepd)
ES
섹터
Transportation and Energy
국가
ES
법률
GDPR상태
FINAL설명
The gas company did not have appropriate measures in place to verify the identity of the data subject. The person who filed the complaint alleges that the company e-mailed his information to a third party in response to a request.
법적 인용
Art. 32
문제 및 위반 사항
Insufficient technical and organisational measures to ensure information security