In September 2024, the National Supervisory Authority for Personal Data Processing closed an investigation at PPC ENERGIE MUNTENIA S.A. data controller and found the violation of Article 12 (3) of Regulation (EU) 2016/679, in relation to Article 17 of the same Regulation.

As such, the controller was sanctioned with a fine in the amount of 9,947.6 RON (the equivalent of 2,000 EUR).

The investigation was launched following a complaint, where the complainant informed us that PPC MUNTENIA S.A. (former ENEL ENERGIE MUNTENIA S.A.) had not replied to their request for the erasure of personal data, as provided by Article 17 of the GDPR.

During the investigation it was found that the data controller had not submitted evidence on providing an answer to the complainant in the deadline set out by Article 12 (3) of the GDPR, respectively within a month or maximum 3 months of receipt of the request, the answer being sent after the expiry of the legal timeframe mentioned above.

The National Supervisory Authority for Personal Data Processing had also imposed on the controller the corrective measure to comply in all cases with the applicable provisions on the consideration and handling without delay of requests made by data subjects under the GDPR (Articles 12-22) and to provide responses to data subjects within the legal deadlines, including through regular testing of dedicated applications.

Legal and Communication Department

A.N.S.P.D.C.P.