Penalty against telephone provider
A private individual in Bulgaria filed a complaint with the local data protection authority because his telephone provider had converted a telephone number with a contract into a prepaid rate, although he had not given any order to do so.
In the course of the investigation it was found that the conversion was carried out in a store of the operator. However, the signature on the form was not the signature of the contractor and the ID number provided was not correct.
As a result, the personal data was processed unlawfully and the Bulgarian data protection authority imposed a fine of 53,000 levs (approximately €27,000).
Entscheidungsdatum:
26.02.2019
Land:
Bulgaria
Art des Verstoßes:
Illegal data processing
Betroffene Datensätze:
1
Waren sensible Daten betroffen?:
No
verhängte Geldstrafe:
€ 27,000,-
Violation of GDPR Paragraph:
5. Principles relating to personal data processing
6. Lawfulness of processing
Quelle:
Communication from the Bulgarian Data Protection Authority (Bulgarian)