Enforcement
EN BULGARIA DPA: Non-compliance with general data processing principles
€5,100 fine - Bulgarian Commission for Personal Data Protection (KZLD)
Content
The Bulgarian DPA has imposed a fine of EUR 5,100 on a data controller. An employee of the controller had lodged a complaint with the DPA. The employee had received a ticket for a traffic offense in Germany that they apparently committed while driving one of the controller's vehicles. However, the data subject correctly stated that at the time of the traffic offense they had been on sick leave and someone else had been driving the vehicle. For this reason, the DPA found that the controller had unlawfully disclosed the data subject's personal data to the German authorities.
GDPR Articles: Art. 5 (1) a), b) GDPR, Art. 6 GDPR
Industry: Employment