- Enforcing jurisdiction
- Italy · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
Areti spa – €1,000,000 Fine (Italy, 2022)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
Areti spa was fined €1 million for mishandling customer data, which led to a customer being wrongly classified as a defaulter. This error affected many customers and prevented them from switching electricity suppliers. Companies must prioritize accurate data management to avoid similar issues.
What happened
Areti spa incorrectly classified a customer as a defaulting customer due to outdated data.
Who was affected
A customer who was misclassified, along with around 47,000 others affected by the same data issue.
What the authority found
The Italian data protection authority ruled that Areti spa violated GDPR by using outdated information and failing to respond adequately to data access requests.
Why this matters
This ruling highlights the critical importance of maintaining accurate data and responding to customer requests. Companies need to ensure their data practices are compliant to avoid significant penalties.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Automated check recorded — 5 March 2026.
Processing notes: national law identified.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Italian DPA has fined electricity supplier Areti spa EUR 1 million. A customer had filed a complaint with the DPA due to Areti classifying them as a defaulting customer, which prevented them from switching to another electricity supplier. This was due to the fact that outdated data in Areti's databases had not been updated following a mismatch in the company's internal systems. The incident affected around 47,000 customers. The DPA's investigation also found that Areti had stored the data for an inadequate length of time. In addition, Areti failed to properly respond to requests to exercise data subject rights.
Related Enforcement Actions (0)
No other enforcement actions found for Areti spa in IT
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
24 November 2022
Authority
Garante per la protezione dei dati personali
Fine Amount
€1,000,000
About this data
Cite as: Cookie Fines. Areti spa - Italy (2022). Retrieved from cookiefines.eu
Last updated: