Acea Energia S.p.A.
€3,000,000
Insufficient legal basis for data processing
決定日期
2025年4月10日
權限
Italian Data Protection Authority (Garante)
IT
部門
Transportation and Energy
國家
IT
法律
GDPR狀態
FINAL說明
The Italian DPA imposed a fine of EUR 3,000,000 on Acea Energia S.p.A. The controller built a network of call centers that engaged in aggressive customer recovery and marketing calls using data obtained and collected by the controller in a list. The controller had no legal basis for processing the data.
法律引文
Art. 5 (1)Art. 6Art. 7Art. 13Art. 24Art. 25Art. 28Art. 32
問題與違規
Insufficient legal basis for data processing