Unknown – €5,100 Fine (Bulgaria, 2023)

€5,100Commission for Personal Data Protection9 February 2023Bulgaria
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

The Bulgarian data protection authority fined a company €5,100 for wrongly sharing an employee's personal data with German authorities. The employee was on sick leave when a traffic offense occurred, but the company still disclosed their information. This case highlights the importance of verifying facts before sharing personal data.

What happened

A company unlawfully disclosed an employee's personal data to German authorities regarding a traffic offense.

Who was affected

An employee who was incorrectly identified as the driver of a company vehicle during a traffic offense.

What the authority found

The Bulgarian DPA found that the company unlawfully shared personal data without verifying the employee's involvement in the traffic offense.

Why this matters

This fine emphasizes the need for companies to carefully verify information before sharing personal data with authorities. It serves as a reminder to ensure data accuracy and protect employee privacy.

GDPR Articles Cited

Art. 6 GDPR
Art. 5(1)(a) GDPR
Full Legal Summary
Detailed

The Bulgarian DPA has imposed a fine of EUR 5,100 on a data controller. An employee of the controller had lodged a complaint with the DPA. The employee had received a ticket for a traffic offense in Germany that they apparently committed while driving one of the controller's vehicles. However, the data subject correctly stated that at the time of the traffic offense they had been on sick leave and someone else had been driving the vehicle. For this reason, the DPA found that the controller had unlawfully disclosed the data subject's personal data to the German authorities.

Related Enforcement Actions (0)

No other enforcement actions found for Unknown in BG

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

9 February 2023

Authority

Commission for Personal Data Protection

Fine Amount

€5,100

Enforcement Tracker ID

ETid-2277

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Unknown - Bulgaria (2023). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: