Madrileña Red de Gas
€12,000
Insufficient technical and organisational measures to ensure information security
Data da decisão
Não disponível
Autoridade
Spanish Data Protection Authority (aepd)
ES
Setor
Transportation and Energy
País
ES
Lei
GDPRStatus
FINALDescrição
The gas company did not have appropriate measures in place to verify the identity of the data subject. The person who filed the complaint alleges that the company e-mailed his information to a third party in response to a request.
Citações legais
Art. 32
Problemas e violações
Insufficient technical and organisational measures to ensure information security