Penalty against telephone provider
A private individual in Bulgaria lodged a complaint with the Bulgarian data protection authority because his telephone company has converted a telephone number with a contract into a prepaid tariff, even though he has not placed an order for it.
In the course of the investigation, it was determined that the conversion was carried out in a shop of the operator. The signature on the form, however, was not the signature of the contractor and the stated ID number was incorrect.
Therefore, the personal data was processed unlawfully, which is why the Bulgarian data protection authority imposed a fine of 53,000 Lew (about € 27,000).
Art des Verstoßes:
Illegal data processing
Waren sensible Daten betroffen?:
Violation of GDPR Paragraph:
5. Principles relating to personal data processing
6. Lawfulness of processing