Sanction RGPD Spanish Data Protection Authority (aepd) — REPSOL COMERCIALIZADORA DE ELECTRICIDAD Y GAS, S.L. : 1,4 M€ (2025)
- Autorité de contrôle
- Spanish Data Protection Authority (aepd)
- Pays
- Espagne
- Entreprise / secteur
- REPSOL COMERCIALIZADORA DE ELECTRICIDAD Y GAS, S.L.
- Montant de l'amende
- 1,4 M€
- Date de la décision
- 26 mai 2025
- Fondement juridique
- Art. 5 (1) d), Art. 32
- Manquement
- Mesures techniques et organisationnelles insuffisantes
Résumé des faits
The Spanish DPA imposed a fine of EUR 1,380,000 on REPSOL COMERCIALIZADORA DE ELECTRICIDAD Y GAS, S.L. The controller used outdated technical and organisational measures to manage customer contracts. This resulted in an individual receiving energy bills, without having a contract with the controller. The size of the controller, a multinational company, and the large amount of personal data being processed, were seen as aggravating factors.