Enforcement
EN Madrileña Red de Gas: Insufficient technical and organisational measures to ensure information security
€12,000 fine - Spanish Data Protection Authority (aepd)
Content
The gas company did not have appropriate measures in place to verify the identity of the data subject. The person who filed the complaint alleges that the company e-mailed his information to a third party in response to a request.
GDPR Articles: Art. 32 GDPR
Industry: Transportation and Energy