Bank – €380 Fine (Bulgaria, 2021)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
A Bulgarian bank was fined EUR 380 for improperly sharing personal data with third parties. This case is important because it shows that even small violations can lead to penalties. Businesses should be careful about how they handle customer data.
What happened
The bank unlawfully transferred personal data to third parties.
Who was affected
Customers whose personal data was shared without proper authorization.
What the authority found
The data protection authority found that the bank violated GDPR by transferring personal data without a legal basis.
Why this matters
This fine serves as a reminder for businesses to follow data protection rules strictly to avoid financial penalties.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Automated check recorded — 17 March 2026.
No issues were reported by that automated check.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Bulgarian DPA has fined a bank EUR 380 for the unlawful transfer of personal data to third parties.
Related Enforcement Actions (2)
Other enforcement actions involving Bank in BG
Fine
€380
Details
Fine Date
26 October 2021
Authority
Commission for Personal Data Protection
Fine Amount
€380
About this data
Cite as: Cookie Fines. Bank - Bulgaria (2021). Retrieved from cookiefines.eu
Last updated: