- Chief Compliance Officer and VP of Legal Affairs, Arrow Electronics
By 
Kyle Brasseur2023-11-10T15:13:00
Axpo Italia, a producer and trader of renewable energy products, was penalized under the General Data Protection Regulation (GDPR) by the Italian data protection authority (Garante) for processing inaccurate and outdated personal data of customers.
Garante assessed a fine of 10 million euros (then-U.S. $10.5 million) against Axpo on Sept. 28. The penalty was announced in an Oct. 23 newsletter. The company said in an emailed statement to Compliance Week on Nov. 1 that it cooperated with the regulator’s investigation and reserved the right to potentially appeal the ruling.
Garante said it received complaints from customers about the activation of Axpo electricity and gas contracts registered in their name without their knowledge. The customers became aware of the accounts after receiving closure letters from previous suppliers or payment reminders of unpaid invoices, according to the regulator’s translated newsletter.
THIS IS MEMBERS-ONLY CONTENT. To continue reading, choose one of the options below.
News and analysis for the well-informed compliance or audit exec. Select an option and click continue.
Annual Membership $499 Value offer
Full price one year membership with auto-renewal.
Membership $599
One-year only, no auto-renewal.
The Czech Republic’s data protection authority issued a fine of 351 million Czech koruna (U.S. $15 million) against antivirus software vendor Avast for alleged violations of the General Data Protection Regulation.
The Italian data protection authority announced a fine of €2.8 million (U.S. $3 million) against UniCredit for alleged violations of the General Data Protection Regulation regarding insufficient security measures the bank had in place during a cyberattack.
Debt collector EOS Matrix said it will challenge a General Data Protection Regulation penalty levied against it by the Croatian data protection authority after finding the data in question in the case does not match the data in its database.
Purported “testimonial and review” service Rytr agreed to stop selling its program that used artificial intelligence to create fake content as part of a consent order with the Federal Trade Commission.
Bank of America avoided a monetary penalty in agreeing to settle charges with the Treasury Department’s Office of the Comptroller of the Currency but was ordered to shore up previously disclosed deficiencies in its Bank Secrecy Act/anti-money laundering (BSA/AML) and sanctions compliance programs.
Aviation maintenance services provider AAR Corp. will pay nearly $56 million to settle charges that it violated the Foreign Corrupt Practices Act when it paid bribes to government officials in Nepal and South Africa.
