|Date of enforcement action:|
|Spain||EUR 60,000 (US$66,000)|
|Defendant company or entity:||Industry segment:|
|Viaqua Gestion Integral De Aguas De Galicia SA||Utilities /|
On 21 November 2019, the Spanish Data Protection Agency imposed a monetary penalty of EUR 60,000 upon Viaqua Gestion Integral De Aguas De Galicia SA, a water utility company in Spain, for dealing with personal data without consent and without a lawful basis. In the instant case, Viaqua Gestion Integral De Aguas De Galicia SA modified account data on the telephoned instructions of a person that was not the holder of the water service account.
In response to a complaint, the Spanish Data Protection Agency made findings that “the respondent proceeded to change the [data subject’s] information contained in the service contract for water supply, without the authorization or consent of the claimant [data subject], who was the holder of the contract.”
The Spanish DPA held that this was a breach of Article 6 of the GDPR.
It is believed that the change of account information may have related to a debt allegedly owed by the data subject to the respondent.
|Enforcement authority:||Type of enforcement action:|
|Spanish Data Protection Agency||Penalty notice|
|Subject to appeal?|
Cite this fine in your work
Data Privacy Fines Index. (2019-11-21 06:49) Viaqua Gestion Integral De Aguas De Galicia SA fined EUR 60k. dataprivacyfines.com. Retrieved from https://dataprivacyfines.com/fine/viaqua-gestion-integral-de-aguas-de-galicia-sa-fined-eur-60k/
Entry last updated: 2020-01-12 01:28 GMT.