# Iberdrola Clientes: Insufficient legal basis for data processing

- Type: Enforcement
- Source: Spanish Data Protection Authority (aepd)
- Date: 2020-02-14
- Original: https://www.enforcementtracker.com/ETid-209
- Canonical: https://overview.legal/posts/46324
- Topics: Personal Data, Consent, International Transfer, Processing, Human Resources, Supervisory Authorities

## Summary

Iberdola Clientes, an electricity company, terminated the data subject's contract without its consent, concluded three new contracts with the data subject, processed his personal data unlawfully and transferred the plaintiff's personal data to a third party without legal basis. In addition to this fine the AEPD also imposed another fine in the amount of EUR 50.000 under the old Spanish Data Protection Law.

## Full text

Iberdola Clientes, an electricity company, terminated the data subject's contract without its consent, concluded three new contracts with the data subject, processed his personal data unlawfully and transferred the plaintiff's personal data to a third party without legal basis. In addition to this fine the AEPD also imposed another fine in the amount of EUR 50.000 under the old Spanish Data Protection Law.

GDPR Articles: Art. 6 GDPR
Industry: Transportation and Energy

---
Generated by overview.legal · https://overview.legal/posts/46324 · 2026-08-22