Skip to content
Enforcement · Bulgarian Commission for Personal Data Protection (KZLD) EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.

Telecommunication service provider: Insufficient legal basis for data processing

€27,100 Fine
Telecommunication service provider
BULGARIA
Art. 6 GDPR Art. 5 GDPR

How it connects

Full text

Repeated registration of prepaid services without the knowledge and consent of the data subject Employees of the telecommunications provider have used personal data and registered the complainant with the company's prepaid service. The data subject had not signed the application and had not consented to the processing of his personal data for the stated purpose. There was also no other legal basis applicable. The signature of the application and the complainant own genuine application were not identical and the persons personal identification number was indicated, but the identity card number was not the complainants one.

Industry: Media, Telecoms and Broadcasting

Similar Content