Penalty against telephone provider
A private individual in Bulgaria lodged a complaint with the Bulgarian data protection authority because his telephone company has converted a telephone number with a contract into a prepaid tariff, even though he has not placed an order for it.
In the course of the investigation, it was determined that the conversion was carried out in a shop of the operator. The signature on the form, however, was not the signature of the contractor and the stated ID number was incorrect.
Therefore, the personal data was processed unlawfully, which is why the Bulgarian data protection authority imposed a fine of 53,000 Lew (about € 27,000).
Type of Issue:
Illegal data processing
Number of involved data records:
Special category of data involved:
Violation of GDPR Paragraph:
5. Principles relating to personal data processing
6. Lawfulness of processing