Telecommunication service provider – €27,100 Fine (Bulgaria, 2019)

€27,100Commission for Personal Data Protection26 February 2019Bulgaria
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

A Bulgarian telecom company was fined for registering prepaid services without user consent. Employees used personal data to sign up individuals without their knowledge. This highlights the need for companies to obtain clear consent before processing personal data.

What happened

A telecom company registered prepaid services using personal data without user consent.

Who was affected

Individuals whose personal data was used to register for prepaid services without their consent.

What the authority found

The Bulgarian authority fined the telecom company for processing personal data without a valid legal basis, violating GDPR.

Why this matters

This case underscores the importance of obtaining consent before processing personal data. Companies should review their consent practices to ensure compliance with data protection laws.

GDPR Articles Cited

Art. 6 GDPR
Art. 5(1)(a) GDPR
Full Legal Summary
Detailed

Repeated registration of prepaid services without the knowledge and consent of the data subject Employees of the telecommunications provider have used personal data and registered the complainant with the company's prepaid service. The data subject had not signed the application and had not consented to the processing of his personal data for the stated purpose. There was also no other legal basis applicable. The signature of the application and the complainant own genuine application were not identical and the persons personal identification number was indicated, but the identity card number was not the complainants one.

Related Enforcement Actions (0)

No other enforcement actions found for Telecommunication service provider in BG

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

26 February 2019

Authority

Commission for Personal Data Protection

Fine Amount

€27,100

Enforcement Tracker ID

ETid-7

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Telecommunication service provider - Bulgaria (2019). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: