- Enforcing jurisdiction
- Bulgaria · Geography does not establish applicable law.
- Confirmed applicable legislation
- Privacy topics
National Revenue Agency – €28,100 Fine (Bulgaria, 2019)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
The National Revenue Agency in Bulgaria was fined for collecting and using a person's personal data without proper authorization. This is significant because it shows that even government agencies must follow data protection laws.
What happened
The National Revenue Agency unlawfully collected and processed personal data of an individual to pursue a debt recovery case.
Who was affected
The affected person was G.B.I., whose personal data was misused in an enforcement case.
What the authority found
The Commission for Personal Data Protection found that the agency violated GDPR by unlawfully processing personal data without a valid legal basis.
Why this matters
This ruling serves as a reminder that all organizations, including public agencies, must comply with data protection laws. Businesses should be cautious about how they handle personal data.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Review needed — 13 March 2026.
Processing notes: amount discrepancy.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The pecuniary sanction of EUR 28, 121 was imposed on the National Revenue Agency for unlawful processing of the personal data of data subject G.B.I. The personal data of G.B.I. was unlawfully collected and subsequently used to form an enforcement case against her for recovery of the sum of EUR ca. 86, 569. In relation to the enforcement case formed, additional data concerning the bank accounts of G.B.I was collected by the National Revenue Agency from the register of the Bulgarian National Bank. The additional collected data was also unlawfully processed by the National Revenue Agency in sending distraint orders to the banks with which G.B.I. had bank accounts.
Related Enforcement Actions (1)
Other enforcement actions involving National Revenue Agency in BG
Details
Fine Date
3 September 2019
Authority
Commission for Personal Data Protection
Fine Amount
€28,100
About this data
Cite as: Cookie Fines. National Revenue Agency - Bulgaria (2019). Retrieved from cookiefines.eu
Last updated: