Bulgaria

Telecommunication service provider

27,100 €

GDPR enforcement action by Bulgarian Commission for Personal Data Protection (KZLD) on 2019-02-26.

Rank · Sector

#264

of 369 in Media, Telecoms and Broadcasting

Rank · Bulgaria

of 31

Rank · All fines

#938

of 3,050

Case details

Authority: Bulgarian Commission for Personal Data Protection (KZLD)
Date: 2019-02-26
Controller / Processor: Telecommunication service provider
Sector: Media, Telecoms and Broadcasting
Quoted Articles: Art. 6 GDPR, Art. 5 (1) a) GDPR
Type of violation: Insufficient legal basis for data processing

Summary

Repeated registration of prepaid services without the knowledge and consent of the data subject

Employees of the telecommunications provider have used personal data and registered the complainant with the company's prepaid service. The data subject had not signed the application and had not consented to the processing of his personal data for the stated purpose. There was also no other legal basis applicable. The signature of the application and the complainant own genuine application were not identical and the persons personal identification number was indicated, but the identity card number was not the complainants one.

Open original source Links to the regulator's original publication or another source.