Penalty against Telecommunications Company and Its Managing Directors
A Bulgarian citizen was urged by a telecommunication company to pay its outstanding bills. The person concerned replied to the company that he did not enter into a contract and that the contract was probably concluded by a fraudster who apparently also forged the signature.
Nevertheless, the telecommunications provider passed on the claims to a debt collection company, which thus also came into possession of the personal data of the data subject. The private individual therefore lodged a complaint for illegal transfer of data with the data protection authority, which was allowed.
The company had to pay a fine of about €5,000. The managing director was also considered liable and, thus, had to pay €5,000 as well.
Art des Verstoßes:
Illegal data processing
Waren sensible Daten betroffen?:
Violation of GDPR Paragraph:
44. General principle for transfers
6. Lawfulness of processing
Activity report of the Bulgarian data protection authority