On 19 January 2022, after receiving hundreds of complaints from users who had received unsolicited promotional phone calls without their consent and who had found it difficult to exercise their rights as set forth in GDPR, the Italian Data Protection Authority imposed a fine of over 26,500,000 euros on a primary energy supplier for the unlawful processing of users’ personal data for telemarketing purposes. In addition to paying the fine, the company shall be obliged to adopt a series of measures to comply with national and European data protection legislation.