Bulgaria

Telecommunications Operator

1,020 €

GDPR enforcement action by Bulgarian Commission for Personal Data Protection (KZLD) on 2023-01-17.

Rank · Sector

#362

of 369 in Media, Telecoms and Broadcasting

Rank · Bulgaria

#22

of 31

Rank · All fines

#2,590

of 3,050

Case details

Authority: Bulgarian Commission for Personal Data Protection (KZLD)
Date: 2023-01-17
Controller / Processor: Telecommunications Operator
Sector: Media, Telecoms and Broadcasting
Quoted Articles: Art. 5 (1) a) GDPR, Art. 6 (1) GDPR
Type of violation: Non-compliance with general data processing principles

Summary

The Bulgarian DPA has imposed a fine of EUR 1,020 on a telecommunications operator. The controller did not implement sufficient technical and organisational measures to ensure data security, resulting in an application for a provider change being processed for an individual who did not apply for one.

Open original source Links to the regulator's original publication or another source.