First significant GDPR fines imposed in Bulgaria

3 September 2019

Last week the Bulgarian Data Protection Commission (“BDPC”) issued the first two significant for local standards fines under the GDPR for leakage of personal data.

The fine of BGN 5.1 million (€2.6 million) sanctions the violation by the National Revenue Agency (the “Agency”) of its obligation to ensure data security of processing of personal data pursuant to Article 32 GDPR

Read more