Date Issued

2019-02-26

Regulation

Authority

Bulgarian Commission for Personal Data Protection (KZLD)

Country

Bulgaria

Violation Type

Non-compliance with lawful basis for data processing

Currency

EUR

Violation Summary

The complainant was unlawfully and unknowingly been registered for the prepaid services of a telecommunication service provider. The employees had used personal data illegally and without express consent from the subject. Moreover, the signature on the application was found to be incongruent and dissimilar to the subject’s own signature. The identity card number on the prepaid application was also fake.

Articles Violated

Art. 6 GDPRArt. 5 (1) a) GDPR

Other Fines for Telecommunication service provider

DateRegulationAmount (USD)Type
2019-10-07GDPR$216,000Failure to comply with data processing principles
2019-10-07GDPR$216,000Failure to comply with data processing principles
2019-10-07GDPR$216,000Failure to comply with data processing principles
2019-10-07GDPR$216,000Failure to comply with data processing principles
2019-09-03GDPR$5,522Non-compliance with lawful basis for data processing
2019-09-03GDPR$5,522.04Non-compliance with lawful basis for data processing
2019-02-26GDPR$29,268Non-compliance with lawful basis for data processing