Penalty against Bulgarian consulting firm

Penalty against Bulgarian consulting firm

The inmate of a state prison complained to the Bulgarian supervisory authority because a company allegedly falsified an employment contract. The contract is said to have been concluded between the person concerned and the company, although he has been in prison continuously since 2003 and therefore had no opportunity to conclude a contract at all.

The data protection authority investigated the incident. The repeated request for comment was ignored by the company. Since the argumentation of the data subject was conclusive and the defendant company did not issue a statement, although the GDPR explicitly provides for cooperation in investigations (see GDPR Article 31), the company was ordered to pay a fine of 10,000 lev (equivalent to approx. € 5000).

Entscheidungsdatum:
26.03.2019

Land:
Bulgaria

Art des Verstoßes:
Illegal data processing

Betroffene Datensätze:
1

Waren sensible Daten betroffen?:
No

verhängte Geldstrafe:
€ 5,000,-

Quelle:
Communication from the Bulgarian Data Protection Authority (Bulgarian)