Enforcement · Italian Data Protection Authority (Garante) EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.

Energia Verde S.p.A.: Non-compliance with general data processing principles

The Italian DPA has imposed a fine of EUR 100,000 on Energia Verde S.p.A.

€100,000 Fine
Energia Verde S.p.A.
ITALY
Art. 5 GDPR Art. 6 GDPR Art. 7 GDPR Art. 12 GDPR Art. 15 GDPR Art. 16 GDPR Art. 17 GDPR Art. 18 GDPR Art. 19 GDPR Art. 20 GDPR Art. 21 GDPR Art. 22 GDPR Art. 24 GDPR Art. 28 GDPR Art. 31 GDPR Art. 58 GDPR
Direct Marketing Controllers Processors Processing Agreement Security
Apr 29, 2025 Source gpdp.it

Full text

The Italian DPA has imposed a fine of EUR 100,000 on Energia Verde S.p.A. The controller had been active in direct marketing activities. The controller processed data without a sufficient legal basis, without sufficient technical and organisational measures to ensure data security and without prior and correct identification of the roles of processors and subjects. The controller fruther failed to adequately react to requests from data subjects to exercise their rights, to demonstrate, that the controller processes data in accordance with the GDPR and adequatly cooperating with the DPA.

Industry: Transportation and Energy

How it connects

References

All 16

Related across sources

C-210/16 Unabhängiges Landeszentrum für Datenschutz v Wirtschaftsakademie Schleswig-Holstein C-210/16 (Wirtschaftsakademie) Jun 5, 2018 IP Address Controllers Processors
C-507/17 Google LLC v CNIL C-507/17 (Google Territorial Scope) Sep 24, 2019 Territorial scope (GDPR) Right to be Forgotten Direct Marketing
C-252/21 Meta Platforms v noyb C-252/21 (Meta Platforms (noyb)) Jan 12, 2023 Supervisory Authorities IP Address Supervision
C-740/22 Endemol Shine Finland Oy In Case C-740/22, the Court of Justice of the European Union (Sixth Chamber) ruled on a preliminary reference from the Itä-Suomen hovioikeus (Court of Appeal, Eastern Finland)… Sixth Chamber Mar 7, 2024 Criminal Data Personal Data Types of Special Categories of Personal Data
C-741/21 GP v juris GmbH In Case C-741/21, the Court of Justice of the European Union (Third Chamber) addressed a preliminary reference from the Landgericht Saarbrücken in proceedings between data subject… Third Chamber Apr 11, 2024 Liability Personal Data Integrity and Confidentiality Principle
C-623/17 Privacy International v Secretary of State C-623/17 (Privacy International) Oct 6, 2020 IP Address Material scope (GDPR) Legitimate Interest
Related documents