# Holaluz-Clidom, S.A.: Insufficient technical and organisational measures to ensure information security

- Type: Enforcement
- Source: Spanish Data Protection Authority (aepd)
- Date: 2023-08-18
- Original: https://www.enforcementtracker.com/ETid-3417
- Canonical: https://overview.legal/posts/607776
- Topics: Data Breaches, Notification Obligation, Security, Personal Data, Supervisory Authorities

## Summary

The Spanish Data Protection Authority (AEPD) fined Holaluz-Clidom, S.A. €675,000 on August 18, 2023, for insufficient technical and organizational measures to ensure information security, following a personal data breach investigation. The authority found the energy sector company violated Article 5(1)(f) and Article 32 of the GDPR by failing to implement appropriate safeguards to protect personal data confidentiality and security.

## Full text

Spanish Data Protection Authority (aepd) fined Holaluz-Clidom, S.A. €675,000 on 2023-08-18 for: Insufficient technical and organisational measures to ensure information security.
GDPR Articles: Art. 5 (1) f) GDPR, Art. 32 GDPR
Sector: Transportation and Energy
Country: Spain
Source: https://www.aepd.es/documento/ps-00565-2023.pdf

---
Generated by overview.legal · https://overview.legal/posts/607776 · 2026-11-14