Bulgaria

Municipality of Kyustendil

2,556 €

GDPR enforcement action by Bulgarian Commission for Personal Data Protection (KZLD) on 2025-11-01.

Rank · Sector

#294

of 356 in Public Sector and Education

Rank · Bulgaria

#18

of 31

Rank · All fines

#2,158

of 3,039

Case details

Authority: Bulgarian Commission for Personal Data Protection (KZLD)
Date: 2025-11-01
Controller / Processor: Municipality of Kyustendil
Sector: Public Sector and Education
Quoted Articles: Unknwon
Type of violation: Insufficient legal basis for data processing

Summary

The Bulgarian DPA has imposed a fine of EUR 2,556 on the Municipality of Kyustendil. The controller stored copies of the identity documents of seven data subjects who had applied for car park access passes. This storage could not have been based on sufficient legal basis.

Open original source Links to the regulator's original publication or another source.