# T.K. EOOD: Insufficient technical and organisational measures to ensure information security

- Type: Enforcement
- Source: Data Protection Commision of Bulgaria (KZLD)
- Date: 2020-02-20
- Original: https://www.enforcementtracker.com/ETid-268
- Canonical: https://overview.legal/posts/46383
- Topics: Integrity and Confidentiality Principle, Security, Liability, Personal Data, Privacy by Design & Default, Processing

## Summary

The fine of ca. EUR 2,557 was imposed on T.K. EOOD for unlawful processing of personal data of data subject I.S. by failure to adopt technical and organizational measures to ensure the information security. T.K. EOOD processed the personal data of I.S. unlawfully nine times in duration of five months. The breaches caused damages to the data subject.

## Full text

The fine of ca. EUR 2,557 was imposed on T.K. EOOD for unlawful processing of personal data of data subject I.S. by failure to adopt technical and organizational measures to ensure the information security. T.K. EOOD processed the personal data of I.S. unlawfully nine times in duration of five months. The breaches caused damages to the data subject.

GDPR Articles: Art. 25 (1) GDPR, Art. 32 GDPR
Industry: Industry and Commerce

---
Generated by overview.legal · https://overview.legal/posts/46383 · 2026-08-22