Axpo Italia, a producer and trader of renewable energy products, was penalized under the General Data Protection Regulation (GDPR) by the Italian data protection authority (Garante) for processing inaccurate and outdated personal data of customers.

Garante assessed a fine of 10 million euros (then-U.S. $10.5 million) against Axpo on Sept. 28. The penalty was announced in an Oct. 23 newsletter. The company said in an emailed statement to Compliance Week on Nov. 1 that it cooperated with the regulator’s investigation and reserved the right to potentially appeal the ruling.

Garante said it received complaints from customers about the activation of Axpo electricity and gas contracts registered in their name without their knowledge. The customers became aware of the accounts after receiving closure letters from previous suppliers or payment reminders of unpaid invoices, according to the regulator’s translated newsletter.