Bank

€380($410 USD)final

Date Issued

2021-10-26

Regulation

Authority

Data Protection Commission of Bulgaria (KZLD)

Country

Bulgaria

Violation Type

Non-compliance with lawful basis for data processing

Currency

EUR

Articles Violated

Art. 5 (1) b) GDPR

Other Fines for Bank

DateRegulationAmount (USD)Type
2022-10-05GDPR$78,300Failure to comply with data processing principles
2022-01-01GDPR--Failure to implement sufficient measures to ensure information security
2021-12-16GDPR$81,000Insufficient involvement of data protection officer
2020-08-05GDPR$108Non-compliance with lawful basis for data processing
2020-03-26GDPR$3,121Non-compliance with lawful basis for data processing
2020-01-01GDPR--The bank made it mandatory for customers to provide a copy of their IDs when opening an account. This was unlawful.
2019-01-17GDPR$540Non-compliance with lawful basis for data processing
2019-01-17GDPR$540Non-compliance with lawful basis for data processing
2018-05-12GDPR$540Non-compliance with lawful basis for data processing
2018-05-12GDPR$540Non-compliance with lawful basis for data processing