NATURGY IBERIA, S.A. – €100,000 Fine (Spain, 2024)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
Naturgy Iberia, S.A. was fined €100,000 because a customer complained that their electricity contract was changed without their permission. The Spanish data protection authority found that a fraudster had impersonated the customer, but Naturgy failed to properly verify the identity before making the change. This case highlights the importance of verifying customer identities to prevent fraud.
What happened
Naturgy Iberia, S.A. changed a customer's electricity contract without proper identity verification.
Who was affected
The customer whose electricity contract was altered without their consent.
What the authority found
The Spanish data protection authority ruled that Naturgy did not adequately verify the identity of the person requesting the contract change.
Why this matters
This ruling emphasizes the need for companies to have strong identity verification processes in place. It serves as a warning that failing to do so can lead to significant fines.
GDPR Articles Cited
View original scraped data
Original data from scraper before AI verification against source document.
The Spanish DPA has imposed a fine of EUR 100,000 on NATURGY IBERIA, S.A.. A customer had filed a complaint with the DPA because an amendment had been made to their electricity supply contract without their consent. In the course of their investigations, the DPA discovered that a fraudster had pretended to be the data subject and managed to change the data subject's contract. According to the DPA, the controller had not properly verified the identity of the fraudster before amending the contract.
Related Enforcement Actions (0)
No other enforcement actions found for NATURGY IBERIA, S.A. in ES
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
10 June 2024
Authority
Agencia Española de Protección de Datos
Fine Amount
€100,000
Enforcement Tracker ID
ETid-2367
About this data
Cite as: Cookie Fines. NATURGY IBERIA, S.A. - Spain (2024). Retrieved from cookiefines.eu
Last updated: