Bank – €500 Fine (Bulgaria, 2019)

€500Commission for Personal Data Protection17 January 2019Bulgaria
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

A bank collected personal information about a student without a proper reason. This led to a fine for the bank, reminding everyone that businesses must have a valid reason to gather personal data. It's crucial for companies to understand the rules around data collection.

What happened

The bank obtained personal data about a student without a legal basis.

Who was affected

A student whose personal data was collected by the bank without permission.

What the authority found

The authority found that the bank did not have a valid legal basis for processing the student's personal data.

Why this matters

This case serves as a warning that businesses must ensure they have a valid reason for collecting personal data. Companies should review their data collection practices to comply with privacy laws.

GDPR Articles Cited

AI-verified

Art. 6(GDPR)
Art. 5(1)(a) GDPR
View original scraped data
Art. 6(GDPR)
Art. 5(1) a) GDPR

Original data from scraper before AI verification against source document.

Source verified 17 March 2026
articles corrected

Details

Fine Date

17 January 2019

Authority

Commission for Personal Data Protection

Fine Amount

€500

Enforcement Tracker ID

ETid-8

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Bank - Bulgaria (2019). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: