Madrileña Red De Gas, S.A.U. – Complaint Upheld (Spain, 2019)

Complaint Upheld
Agencia Española de Protección de Datos5 November 2019Spain
final
Complaint Upheld

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

Madrileña Red De Gas, S.A.U. shared a customer's personal data with a tenant without permission, leading to a complaint. The Spanish data protection authority found that this violated confidentiality rules. This case serves as a reminder for companies to protect customer information and not share it without consent.

What happened

The company shared a customer's personal data with a tenant without prior authorization.

Who was affected

The customer whose data was shared without permission was affected.

What the authority found

The authority ruled that the company violated the principle of confidentiality by sharing personal data with a third party.

Why this matters

This case highlights the need for companies to respect customer privacy and confidentiality. Businesses should review their data-sharing practices to avoid similar violations.

GDPR Articles Cited

AI-verified

Art. 5(1)(f) GDPR
View original scraped data
Art. 5(1)(f) GDPR

Original data from scraper before AI verification against source document.

Source verified 21 March 2026
amount discrepancy
Full Legal Summary
Detailed

A customer of a gas distribution company (Madrileña Red De Gas, S.A.U) complained to the AEPD claiming that the company had provided the complainant's tenant with his personal data without prior authorisation to do so. The DPA found that the supply contract was only between the complainant and the company, so that the tenant was a third party. Was the principle of confidentality under Article 5(1)(f) GDPR violated? By sharing personal data with a third party, the company failed to comply with the principle of confidentiality provided for in Article 5(1)(f) GDPR. The company was fined € 12,000.

Outcome

Complaint Upheld

A data subject complaint that was upheld by the DPA.

Details

Decision Date

5 November 2019

Authority

Agencia Española de Protección de Datos

GDPRhub ID

gdprhub-222

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Madrileña Red De Gas, S.A.U. - Spain (2019). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: