PrivacyCache
ITConsent ViolationOtherDecision: 2022-01-11

Enel Energia SpA

€26.5M

Issued by Garante per la Protezione dei Dati Personali on 2022-01-11

What happened

Italy's Garante fined Enel Energia, one of Italy's largest energy suppliers, €26.5 million for unlawful telemarketing activities conducted through a network of external agencies and call centers. The investigation found that Enel Energia's contractors made millions of unsolicited promotional calls using contact lists obtained without valid consent. Consumers who had not consented to marketing — and even those who had explicitly opted out — continued to receive unwanted calls. The company failed to adequately supervise its network of telemarketing agents and did not implement effective mechanisms to verify consent or honor opt-out requests across its supply chain of marketing partners.

Articles violated

Art. 5 GDPRArt. 6 GDPRArt. 7 GDPRArt. 21 GDPR

Lessons learned

Energy companies and utilities using telemarketing must implement end-to-end consent verification across their entire contractor network. The controller cannot delegate compliance responsibility to third-party marketing agencies. Regular audits of contractor practices, suppression list management, and consent verification are essential. When fines reach this scale, they demonstrate that regulators view systematic telemarketing violations as intentional non-compliance rather than isolated incidents.

Source

View original decision

Disclaimer: This summary is for informational purposes only and does not constitute legal advice. Refer to the original decision for complete details.

Get enforcement alerts for Other

We track GDPR fines across Europe. Enter your email to get notified about new enforcement actions.

Related enforcement actions