Penalty against Telecommunications Company and Its Managing Directors
A Bulgarian citizen was urged by a telecommunication company to pay its outstanding bills. The person concerned replied to the company that he did not enter into a contract and that the contract was probably concluded by a fraudster who apparently also forged the signature.
Nevertheless, the telecommunications provider passed on the claims to a debt collection company, which thus also came into possession of the personal data of the data subject. The private individual therefore lodged a complaint for illegal transfer of data with the data protection authority, which was allowed.
The company had to pay a fine of about €5,000. The managing director was also considered liable and, thus, had to pay €5,000 as well.
Decision data:
03.09.2019
Country:
Bulgaria
Type of Issue:
Illegal data processing
Number of involved data records:
1
Special category of data involved:
No
Fine:
€ 10,000,-
Violation of GDPR Paragraph:
44. General principle for transfers
6. Lawfulness of processing
Reference:
Activity report of the Bulgarian data protection authority