REPSOL COMERCIALIZADORA DE ELECTRICIDAD Y GAS, S.L. – €1,380,000 Fine (Spain, 2025)

€1,380,000Agencia Española de Protección de Datos26 May 2025Spain
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

The Spanish data protection authority fined REPSOL COMERCIALIZADORA DE ELECTRICIDAD Y GAS, S.L. EUR 1,380,000 for using outdated methods to manage customer contracts. This led to a person receiving energy bills without having a contract with the company. This case highlights the importance of keeping customer data management practices up to date.

What happened

REPSOL COMERCIALIZADORA DE ELECTRICIDAD Y GAS, S.L. failed to use proper technical measures to manage customer contracts.

Who was affected

Customers who received energy bills without having a contract with REPSOL were affected.

What the authority found

The authority found that the company did not adequately protect personal data, violating GDPR's requirements for data management.

Why this matters

This ruling emphasizes that companies must maintain effective data management practices to avoid hefty fines. It serves as a warning for other businesses to review their data handling processes.

GDPR Articles Cited

AI-verified

Art. 32(GDPR)
Art. 5(1)(d) GDPR
View original scraped data
Art. 5(1)(d) GDPR
Art. 32 GDPR

Original data from scraper before AI verification against source document.

Source verified 5 March 2026
national law identified
Full Legal Summary
Detailed

The Spanish DPA imposed a fine of EUR 1,380,000 on REPSOL COMERCIALIZADORA DE ELECTRICIDAD Y GAS, S.L. The controller used outdated technical and organisational measures to manage customer contracts. This resulted in an individual receiving energy bills, without having a contract with the controller. The size of the controller, a multinational company, and the large amount of personal data being processed, were seen as aggravating factors.

Related Enforcement Actions (0)

No other enforcement actions found for REPSOL COMERCIALIZADORA DE ELECTRICIDAD Y GAS, S.L. in ES

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

26 May 2025

Authority

Agencia Española de Protección de Datos

Fine Amount

€1,380,000

Enforcement Tracker ID

ETid-2738

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. REPSOL COMERCIALIZADORA DE ELECTRICIDAD Y GAS, S.L. - Spain (2025). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: