CPDP (Bulgaria) · 17 January 2023
Not named in the source
About: Accountability, Data principles, Unlawful processing
FineBGN2,000≈ €1,020Violation found
- Regulator
- CPDP (Bulgaria)
- Decided
- 17 January 2023
- Country
- Bulgaria
- Sector
- Not given
- Regulator’s reference
- PPN-01-291/03.05.2022
- Fino case number
- 2023/BG/008
What happened
The DPA found that a controller lacked a legal basis to transfer a data subject's phone number to another telecommunications operator without the data subject's prior authorisation. The DPA fined the controller €1,024 (BGN 2,000).
Summary from GDPRhub (noyb), written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Art. 5Principles relating to processing of personal data5(1)(a)Read →
- Art. 6Lawfulness of processing6(1)Read →
- Art. 24Responsibility of the controllerRead →
- Accountability
- Data principles
- Unlawful processing
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote 2023/BG/008.