Spain's data protection authority, the Agencia Española de Protección de Datos, fined utility company Endesa Energía 6.1 million euros for alleged EU General Data Protection Regulation violations. The AEPD claimed the company had insufficient data security measures and did not notify consumers of a data breach.