L.E. EOOD – €2,560 Fine (Bulgaria, 2020)

€2,560Commission for Personal Data Protection20 February 2020Bulgaria
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

L.E. EOOD was fined for processing personal data without consent or a valid contract. They failed to protect the data properly. This case highlights the importance of securing personal data and having clear agreements with individuals.

What happened

L.E. EOOD processed personal data without consent and failed to implement security measures.

Who was affected

The person whose data was processed without consent or a valid contract.

What the authority found

The Commission for Personal Data Protection found that L.E. EOOD processed data unlawfully, lacking proper security measures.

Why this matters

This case emphasizes the need for businesses to secure personal data and ensure they have a legal basis for processing it. Companies should regularly review their data handling practices to avoid similar fines.

GDPR Articles Cited

Art. 6 GDPR
Art. 32 GDPR
Art. 25(1) GDPR
Full Legal Summary
Detailed

The fine of ca EUR 2,557 was imposed on L.E. EOOD for unlawful processing of personal data of data subject I.S. without the knowing and the consent of the data subject and also without a valid contractual relationship between L.E. EOOD and I.S. The enterprise processed the personal data of I.S. unlawfully seven times in duration of 3 months by failure to adopt technical and organizational measures to ensure the information security. In addition to the fine, the Commission for Personal Data Protection (“KZLD”) instructed L.E. EOOD to do regular inspections of its data processing activities, to do risk analysis regarding customers and employees and to conduct periodic trainings of the employees. The KZLD also ordered L.E. EOOD to archive and keep the documents containing the personal data only for limited purposes and the timeframe as required by law.

Related Enforcement Actions (0)

No other enforcement actions found for L.E. EOOD in BG

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

20 February 2020

Authority

Commission for Personal Data Protection

Fine Amount

€2,560

Enforcement Tracker ID

ETid-269

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. L.E. EOOD - Bulgaria (2020). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: