Iberdrola Clientes
€80,000
Insufficient legal basis for data processing
Decision Date
14 de fevereiro de 2020
Authority
Spanish Data Protection Authority (aepd)
ES
Sector
Transportation and Energy
Country
ES
Law
GDPRStatus
FINALDescription
Iberdola Clientes, an electricity company, terminated the data subject's contract without its consent, concluded three new contracts with the data subject, processed his personal data unlawfully and transferred the plaintiff's personal data to a third party without legal basis. In addition to this fine the AEPD also imposed another fine in the amount of EUR 50.000 under the old Spanish Data Protection Law.
Legal Citations
Art. 6
Issues & Violations
Insufficient legal basis for data processing