Viaqua Gestion Integral De Aguas De Galicia SA fined EUR 60k

Essentials

Date of enforcement action:
21/Nov/2019
Jurisdiction: Fine imposed:
Spain Flag for Spain, which is the jurisdiction taking enforcement action EUR 60,000 (US$66,000)
Defendant company or entity: Industry segment:
Viaqua Gestion Integral De Aguas De Galicia SA Utilities /

Case summary

On 21 November 2019, the Spanish Data Protection Agency imposed a monetary penalty of EUR 60,000 upon Viaqua Gestion Integral De Aguas De Galicia SA, a water utility company in Spain, for dealing with personal data without consent and without a lawful basis. In the instant case, Viaqua Gestion Integral De Aguas De Galicia SA modified account data on the telephoned instructions of a person that was not the holder of the water service account.

In response to a complaint, the Spanish Data Protection Agency made findings that “the respondent proceeded to change the [data subject’s] information contained in the service contract for water supply, without the authorization or consent of the claimant [data subject], who was the holder of the contract.”

The Spanish DPA held that this was a breach of Article 6 of the GDPR.

It is believed that the change of account information may have related to a debt allegedly owed by the data subject to the respondent.

(Spanish DPA)

Applicable legal provisions

Enforcement information

Enforcement authority: Type of enforcement action:
Spanish Data Protection Agency Flag for Spain, which is the jurisdiction taking enforcement action Penalty notice
Subject to appeal?
Yes

Cite this fine in your work

Data Privacy Fines Index. (2019-11-21 06:49) Viaqua Gestion Integral De Aguas De Galicia SA fined EUR 60k. dataprivacyfines.com. Retrieved from https://dataprivacyfines.com/fine/viaqua-gestion-integral-de-aguas-de-galicia-sa-fined-eur-60k/

Entry last updated: 2020-01-12 01:28 GMT.