ENDESA erroneously charged the claimant’s bank account, as the beneficiary of the energy supply company’s services was a third party. Upon request of the claimant that her data be deleted, ENDESA handled the data improperly and mistakenly sent it to the third party. Therefore, the AEPD considered that ENDESA had breached the confidentiality principle. It’s worth noting that the third party had been given a 2-year restraining order regarding the data subject.
endesa erroneously charged the claimant’s bank account as the beneficiary of the energy supply company’s services was a third party upon request of the claimant that her data be deleted endesa handled the data improperly and mistakenly sent it to the third party therefore the aepd considered that endesa had breached the confidentiality principle it’s worth noting that the third party had been given a year restraining order regarding the data subject
endesa erroneously charge  claimant’ bank account   beneficiary   energy supply company’ service   third party upon request   claimant   data  delete endesa handle  data improperly  mistakenly send    third party therefore  aepd consider  endesa  breach  confidentiality principle ’ worth note   third party   give  year restrain order regard  data subject