Penalty against telephone provider
A private individual in Bulgaria filed a complaint with the local data protection authority because his telephone provider had converted a telephone number with a contract into a prepaid rate, although he had not given any order to do so.
In the course of the investigation it was found that the conversion was carried out in a store of the operator. However, the signature on the form was not the signature of the contractor and the ID number provided was not correct.
As a result, the personal data was processed unlawfully and the Bulgarian data protection authority imposed a fine of 53,000 levs (approximately €27,000).
Art des Verstoßes:
Illegal data processing
Waren sensible Daten betroffen?:
Violation of GDPR Paragraph:
5. Principles relating to personal data processing
6. Lawfulness of processing