Bulgaria

Unknown

5,100 €

GDPR enforcement action by Bulgarian Commission for Personal Data Protection (KZLD) on 2023-02-09.

Rank · Sector

#123

of 213 in Employment

Rank · Bulgaria

#13

of 31

Rank · All fines

#1,687

of 3,050

Case details

Authority: Bulgarian Commission for Personal Data Protection (KZLD)
Date: 2023-02-09
Controller / Processor: Unknown
Sector: Employment
Quoted Articles: Art. 5 (1) a), b) GDPR, Art. 6 GDPR
Type of violation: Non-compliance with general data processing principles

Summary

The Bulgarian DPA has imposed a fine of EUR 5,100 on a data controller. An employee of the controller had lodged a complaint with the DPA. The employee had received a ticket for a traffic offense in Germany that they apparently committed while driving one of the controller's vehicles. However, the data subject correctly stated that at the time of the traffic offense they had been on sick leave and someone else had been driving the vehicle. For this reason, the DPA found that the controller had unlawfully disclosed the data subject's personal data to the German authorities.

Open original source Links to the regulator's original publication or another source.