NATURGY ENERGY GROUP, S.A. – €48,000 Fine (Spain, 2022)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
NATURGY ENERGY GROUP, S.A. in Spain was fined for not properly verifying a person's identity before changing a customer's email for bill delivery. The DPA found their verification process inadequate under GDPR rules. This case stresses the need for strong identity checks to protect customer data.
What happened
NATURGY ENERGY GROUP, S.A. failed to properly verify identity before changing a customer's email address for receiving bills.
Who was affected
The customer whose email address was changed without proper identity verification.
What the authority found
The Spanish DPA fined the company for inadequate identity verification, violating GDPR's requirements for data security and integrity.
Why this matters
This ruling highlights the importance of robust identity verification processes to prevent unauthorized access to personal data. Companies should ensure their security measures meet GDPR standards to avoid similar penalties.
GDPR Articles Cited
The Spanish DPA has imposed a fine on NATURGY ENERGY GROUP, S.A.. A person had contacted the energy company pretending to be a relative of a customer. The person requested to receive electricity bills using a new email address. To verify the identity, the person had to provide name, address, ID number, contract number and the last 4 digits of the bank account details of the customer. However, the DPA found that this verification did not comply with the requirements of the GDPR for identity verification and considered it to be a violation of Art. 5 (1) f) GDPR and Art. 32 GDPR. The original fine of EUR 80,000 was reduced to EUR 48,000 due to voluntary payment and admission of responsibility.
Related Enforcement Actions (0)
No other enforcement actions found for NATURGY ENERGY GROUP, S.A. in ES
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
28 August 2022
Authority
Agencia Española de Protección de Datos
Fine Amount
€48,000
Enforcement Tracker ID
ETid-1394
About this data
Cite as: Cookie Fines. NATURGY ENERGY GROUP, S.A. - Spain (2022). Retrieved from cookiefines.eu
Last updated: