Commission for Personal Data Protection
Data protection authority of Bulgaria
Total Actions
35
Total Fines
€3.8M
Average Fine
€117K
Among actions with fines
Enforcement Factor
1.10
Measured
About Commission for Personal Data Protection
The Commission for Personal Data Protection is Bulgaria's data protection authority responsible for enforcing GDPR and data-protection compliance. Commission for Personal Data Protection has taken 35 enforcement actions resulting in €3,755,712 in total penalties, with an average fine of €117K per sanctioned entity. The authority maintains a balanced enforcement approach (enforcement factor: 1.1), combining deterrent fines with corrective orders. Its most significant action was a €2,600,000 fine against National Revenue Agency in 2019. The most frequently cited legal basis in Commission for Personal Data Protection's decisions is Art. 6(1) GDPR and Art. 6(GDPR).
Largest Fines by Commission for Personal Data Protection
View all actionsRecent Actions by Commission for Personal Data Protection
View all actionsEnforcement by Year
| Year | Actions | Total Fines |
|---|---|---|
| 2018 | 1 | €500 |
| 2019 | 15 | €3.2M |
| 2020 | 5 | €13K |
| 2021 | 1 | €380 |
| 2022 | 4 | €518K |
| 2023 | 6 | €21K |
| 2024 | 1 | €0 |
| 2025 | 2 | €5K |
Frequently Asked Questions
How many GDPR and data-protection actions has Commission for Personal Data Protection issued?
Commission for Personal Data Protection has issued 35 enforcement actions related to GDPR and data-protection, totaling €3.8M.
What is Commission for Personal Data Protection's largest GDPR and data-protection fine?
The largest was a €2.6M fine against National Revenue Agency on 2019-08-28.