Unknown – €5,100 Fine (Bulgaria, 2023)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
The Bulgarian data protection authority fined a company €5,100 for wrongly sharing an employee's personal data with German authorities. The employee was on sick leave when a traffic offense occurred, but the company still disclosed their information. This case highlights the importance of verifying facts before sharing personal data.
What happened
A company unlawfully disclosed an employee's personal data to German authorities regarding a traffic offense.
Who was affected
An employee who was incorrectly identified as the driver of a company vehicle during a traffic offense.
What the authority found
The Bulgarian DPA found that the company unlawfully shared personal data without verifying the employee's involvement in the traffic offense.
Why this matters
This fine emphasizes the need for companies to carefully verify information before sharing personal data with authorities. It serves as a reminder to ensure data accuracy and protect employee privacy.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Automated check recorded — 14 March 2026.
Processing notes: articles corrected, national law identified.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The Bulgarian DPA has imposed a fine of EUR 5,100 on a data controller. An employee of the controller had lodged a complaint with the DPA. The employee had received a ticket for a traffic offense in Germany that they apparently committed while driving one of the controller's vehicles. However, the data subject correctly stated that at the time of the traffic offense they had been on sick leave and someone else had been driving the vehicle. For this reason, the DPA found that the controller had unlawfully disclosed the data subject's personal data to the German authorities.
Related Enforcement Actions (0)
No other enforcement actions found for Unknown in BG
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
9 February 2023
Authority
Commission for Personal Data Protection
Fine Amount
€5,100
About this data
Cite as: Cookie Fines. Unknown - Bulgaria (2023). Retrieved from cookiefines.eu
Last updated: