Acea Energia SPA – €3,000,000 Fine (Italy, 2025)
€3,000,000Garante per la protezione dei dati personali10 April 2025Italy
final
ePrivacy
Fine
The case focused on unlawful telemarketing practices and lack of proper data processing agreements, unrelated to cookies or consent banners.
GDPR Articles Cited
AI-verified
Art. 6 GDPR
Art. 6 GDPRLegal bases for processing personal data (consent, contract, legal obligation, vital interests, public task, or legitimate interests).Art. 7 GDPR
Art. 7 GDPRConditions for valid consent: must be freely given, specific, informed, and unambiguous. Consent can be withdrawn at any time.Art. 13 GDPR
Art. 13 GDPRInformation to provide when collecting data directly from the person (identity of controller, purpose, legal basis, retention period, rights).Art. 24 GDPR
Art. 25 GDPR
Art. 25 GDPRData protection by design and by default: organisations must build privacy protections into their systems from the start.Art. 28 GDPR
Art. 28 GDPRProcessor obligations: rules for organisations that process data on behalf of a controller (data processing agreements).Art. 32 GDPR
Art. 32 GDPRSecurity of processing: organisations must implement appropriate technical and organisational measures to protect personal data.Art. 5(1)(a) GDPR
Art. 5(1)(a) GDPRCore data protection principles: lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity, and accountability.Art. 5(1)(f) GDPR
Art. 5(1)(f) GDPRCore data protection principles: lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity, and accountability.View original scraped data
Art. 5(1)(f) GDPR
Art. 5(1)(a) GDPR
Art. 6 GDPR
Art. 7 GDPR
Art. 13 GDPR
Art. 24 GDPR
Art. 25 GDPR
Art. 28 GDPR
Art. 32 GDPR
Original data from scraper before AI verification against source document.
National Law Articles
AI-identified
Art. 130 d. lg.s 196/2003
Source verified 5 March 2026
national law identified
scope corrected
Full Legal Summary
The case focused on unlawful telemarketing practices and lack of proper data processing agreements, unrelated to cookies or consent banners.
Related Enforcement Actions (0)
No other enforcement actions found for Acea Energia SPA in IT
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
10 April 2025
Authority
Garante per la protezione dei dati personali
Fine Amount
€3,000,000
GDPRhub ID
gdprhub-9203About this data
Cite as: Cookie Fines. Acea Energia SPA - Italy (2025). Retrieved from cookiefines.eu
Report Inaccuracy
Last updated: