Search Privacy Fines
Browse and filter privacy enforcement fines worldwide.
42 fines found
Total: $7.5M
| Date | Company | Fine | Regulation | Authority | Country | Type | Summary |
|---|---|---|---|---|---|---|---|
| 2019-09-03 | Private enforcement agent | €1K | GDPR | Data Protection Commission of Bulgaria (KZLD) | Bulgaria | Non-compliance with subjects' rights protection safeguards | --Articles: Art. 12 (4) GDPR, Art. 15 GDPR |
| 2019-09-03 | Private enforcement agent | €1K | GDPR | Data Protection Commission of Bulgaria (KZLD) | Bulgaria | Non-compliance with subjects' rights protection safeguards | A private enforcement agent was fined for the unlawful processing of personal da...A private enforcement agent was fined for the unlawful processing of personal data of an individual. The agent had conducted video surveillance on the individual and refused to grant access to the collected data. The affected individual submitted an application to access their personal data but the enforcement agent rejected this request and refused to motivate this decision. Articles: Art. 12 (4) GDPR, Art. 15 GDPR |
| 2019-09-03 | Telecom company | €1K | GDPR | Data Protection Commission of Bulgaria (KZLD) | Bulgaria | Non-compliance with lawful basis for data processing | --Articles: Art. 6 (1) GDPR, Art. 25 (1) GDPR |
| 2019-09-03 | Telecom company | €1K | GDPR | Data Protection Commission of Bulgaria (KZLD) | Bulgaria | Non-compliance with lawful basis for data processing | A fine of €1,022 was imposed on a national telecom company for the unlawful proc...A fine of €1,022 was imposed on a national telecom company for the unlawful processing of the personal data of a citizen. The personal data of the individual was unlawfully accessed and processed in order to cancel a contract. Articles: Art. 6 (1) GDPR, Art. 25 (1) GDPR |
| 2019-10-28 | Employer | €511 | GDPR | Data Protection Commission of Bulgaria (KZLD) | Bulgaria | Non-compliance with subjects' rights protection safeguards | --Articles: Art. 12 (3) GDPR, Art. 15 (1) GDPR |
| 2019-10-07 | BD | €511 | GDPR | Data Protection Commission of Bulgaria (KZLD) | Bulgaria | Lack of cooperation with Data Protection Authority | --Articles: Art. 31 GDPR |
| 2019-10-28 | Employer | €511 | GDPR | Data Protection Commission of Bulgaria (KZLD) | Bulgaria | Non-compliance with subjects' rights protection safeguards | A company was fined with €511 because it refused to give access to the personal ...A company was fined with €511 because it refused to give access to the personal data of an employee who submitted an application to receive access to their personal data. Articles: Art. 12 (3) GDPR, Art. 15 (1) GDPR |
| 2019-10-07 | BD | €511 | GDPR | Data Protection Commission of Bulgaria (KZLD) | Bulgaria | Lack of cooperation with Data Protection Authority | BD was fined with €511 because it failed to provide access to information which ...BD was fined with €511 because it failed to provide access to information which the national DPA requested in order to resolve a complaint. Articles: Art. 31 GDPR |
| 2019-04-08 | Medical service providers | €510 | GDPR | Data Protection Commission of Bulgaria (KZLD) | Bulgaria | Non-compliance with lawful basis for data processing | --Articles: Art. 5 (1) a) GDPR, Art. 9 (1) GDPR, Art. 9 (2) GDPR, Art. 6 (1) GDPR |
| 2019-04-08 | Medical service providers | €510 | GDPR | Data Protection Commission of Bulgaria (KZLD) | Bulgaria | Non-compliance with lawful basis for data processing | The medical centers unlawfully processed personal data of the subject G.B. Softw...The medical centers unlawfully processed personal data of the subject G.B. Software was used to generate the registration form for changing the GP, and it went ahead to the Regional Health Insurance Fund. After it arrived at another medical center, it was concluded that all parts had taken part in the unlawful processing of data. Articles: Art. 5 (1) a) GDPR, Art. 9 (1) GDPR, Art. 9 (2) GDPR, Art. 6 (1) GDPR |
| 2019-01-17 | Bank | €500 | GDPR | Bulgarian Commission for Personal Data Protection (KZLD) | Bulgaria | Non-compliance with lawful basis for data processing | --Articles: Art. 6 GDPR, Art. 5 (1) a) GDPR |
| 2019-02-22 | Unknown company | €500 | GDPR | Bulgarian Commission for Personal Data Protection (KZLD) | Bulgaria | Non-compliance with subjects' rights protection safeguards | An employee requested access to his personal data from his employer. The request...An employee requested access to his personal data from his employer. The request was partially completed and delayed without justification. Articles: Art. 15 GDPR |
| 2019-01-17 | Bank | €500 | GDPR | Bulgarian Commission for Personal Data Protection (KZLD) | Bulgaria | Non-compliance with lawful basis for data processing | The bank unlawfully came into possession of personal data related to a student.The bank unlawfully came into possession of personal data related to a student. Articles: Art. 6 GDPR, Art. 5 (1) a) GDPR |
| 2018-05-12 | Bank | €500 | GDPR | Bulgarian Commission for Personal Data Protection (KZLD) | Bulgaria | Non-compliance with lawful basis for data processing | The bank was fined 500 EUR for calling a client about the unresolved bills of hi...The bank was fined 500 EUR for calling a client about the unresolved bills of his neighbor. The client then invoked his right to be forgotten, which the bank ignored at first. Another motion was started, and the client complained to the KZLD. Apparently, the bank hadn’t requested consent from the subject when processing his data. Articles: Art. 5 (1) b) GDPR, Art. 6 GDPR |
| 2019-02-22 | Unknown company | €500 | GDPR | Bulgarian Commission for Personal Data Protection (KZLD) | Bulgaria | Non-compliance with subjects' rights protection safeguards | --Articles: Art. 15 GDPR |
| 2018-05-12 | Bank | €500 | GDPR | Bulgarian Commission for Personal Data Protection (KZLD) | Bulgaria | Non-compliance with lawful basis for data processing | --Articles: Art. 5 (1) b) GDPR, Art. 6 GDPR |
| 2021-10-26 | Bank | €380 | GDPR | Data Protection Commission of Bulgaria (KZLD) | Bulgaria | Non-compliance with lawful basis for data processing | --Articles: Art. 5 (1) b) GDPR |