Bank – €500 Fine (Bulgaria, 2019)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
A bank collected personal information about a student without a proper reason. This led to a fine for the bank, reminding everyone that businesses must have a valid reason to gather personal data. It's crucial for companies to understand the rules around data collection.
What happened
The bank obtained personal data about a student without a legal basis.
Who was affected
A student whose personal data was collected by the bank without permission.
What the authority found
The authority found that the bank did not have a valid legal basis for processing the student's personal data.
Why this matters
This case serves as a warning that businesses must ensure they have a valid reason for collecting personal data. Companies should review their data collection practices to comply with privacy laws.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Automated check recorded — 17 March 2026.
Processing notes: articles corrected.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
A bank gained personal data concernign a student wihtout a legal basis.
Related Enforcement Actions (2)
Other enforcement actions involving Bank in BG
Fine
€500
Details
Fine Date
17 January 2019
Authority
Commission for Personal Data Protection
Fine Amount
€500
About this data
Cite as: Cookie Fines. Bank - Bulgaria (2019). Retrieved from cookiefines.eu
Last updated: