- Enforcing jurisdiction
- Spain · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
EDP Comercializadora, S.A.U. – €75,000 Fine (Spain, 2020)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
EDP Comercializadora sent a gas bill to a person who never signed a contract with them. The company claimed the person was part of a contract with another energy provider, but the court found they needed proof of that agreement. This case highlights the importance of obtaining consent before processing personal data.
What happened
EDP Comercializadora processed personal data related to a gas contract without the applicant's consent.
Who was affected
The applicant, who received an invoice for a gas contract he did not sign.
What the authority found
The authority ruled that EDP Comercializadora failed to prove that the applicant had consented to the contract, violating GDPR's requirements.
Why this matters
This ruling emphasizes that companies must have clear consent before using personal data. Small businesses should ensure they have proper agreements in place to avoid similar issues.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Automated check recorded — 12 March 2026.
Processing notes: articles corrected.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The company processed personal data in connection with a gas contract without the consent of the applicant. The decision finds that the applicant received an invoice for a gas contract which he did not sign and that EDP Comercializadora claims that the applicant is party to a contract with another energy company which has a supply contract with EDP Comercializadora and that the processing of data is therefore justified. The AEPD stated that EDP Comercializadora had to prove that the plaintiff had agreed to a contract with a second entity and not only with its direct energy supplier.
Related Enforcement Actions (1)
Other enforcement actions involving EDP Comercializadora, S.A.U. in ES
Details
Fine Date
7 January 2020
Authority
Agencia Española de Protección de Datos
Fine Amount
€75,000
About this data
Cite as: Cookie Fines. EDP Comercializadora, S.A.U. - Spain (2020). Retrieved from cookiefines.eu
Last updated: